EUVD-2004-1384

Malware in sbrugna...

Ubuntu 4.10 : apache vulnerabilities (USN-65-1)

Javier Fernandez-Sanguino Pena noticed that the 'checkforensic' script created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program. Note that Tenable Network Security has extract...

CVE-2004-1387: Undefined Security Weakness

The checkforensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files...