Lucene search

K
osvGoogleOSV:DSA-622-1
HistoryJan 03, 2005 - 12:00 a.m.

htmlheadline - insecure temporary files

2005-01-0300:00:00
Google
osv.dev
7

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

Javier FernĂĄndez-Sanguino PeĂąa from the Debian Security Audit Project
has discovered multiple insecure uses
of temporary files that could lead to overwriting arbitrary files via
a symlink attack.

For the stable distribution (woody) these problems have been fixed in
version 21.8-3.

The unstable distribution (sid) does not contain this package.

We recommend that you upgrade your htmlheadline package.

CPENameOperatorVersion
htmlheadlineeq21.8-2

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P