[SECURITY] [DSA 477-1] New xine-ui packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 477-1 [email protected] http://www.debian.org/security/ Martin Schulze April 6th, 2004 http://www.debian.org/security/faq -...

DSA-477 xine-ui - insecure temporary file creation

Bulletin has no description...

CVE-2004-0372

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

CVE-2004-0372

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

CVE-2004-0372

CVE-2004-0372 affects xine and related components (xine-bugreport, xine-check) where a local user can cause overwriting of arbitrary files via a symlink attack on the bug report email generated by those scripts. The vulnerability arises from insecure handling of temporary/bug report files, enabli...

CVE-2004-0372: Undefined Security Weakness

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

xinebug.txt

Product: xine-bugreport/xine-check scripts. http://xinehq.de/ Versions: xine-bugreport && xine-check they are the same script, but 2 copies exist in a system with different names Bug: Symlink bug / tmpfile bug. Impact: Attacker's can write to arbitrary files, corrupt sensitive system files, and i...

insecure temporary file creation in xine-check, xine-bugreport

Some scripts installed with xine create temporary files insecurely. It is recommended that these scripts xine-check, xine-bugreport not be used. They are not needed for normal operation...