Lucene search

K
osvGoogleOSV:DSA-927-1
HistoryDec 27, 2005 - 12:00 a.m.

tkdiff - insecure temporary file

2005-12-2700:00:00
Google
osv.dev
5

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

The last update of tkdiff contained a programming error which is
fixed by this version.  For completeness we’re adding the original
advisory text:

>
> Javier FernĂĄndez-Sanguino PeĂąa from the Debian Security Audit project
> discovered that tkdiff, a graphical side by side “diff” utility,
> creates temporary files in an insecure fashion.
>
>
>

For the old stable distribution (woody) this problem has been fixed in
version 3.08-3woody1.

For the stable distribution (sarge) this problem has been fixed in
version 4.0.2-1sarge1.

For the unstable distribution (sid) this problem has been fixed in
version 4.0.2-4.

We recommend that you upgrade your tkdiff package.

CPENameOperatorVersion
tkdiffeq1:4.0.2-1

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P