Ubuntu 5.10 / 6.06 LTS : mono vulnerability (USN-357-1)

Sebastian Krahmer of the SuSE security team discovered that the System.CodeDom.Compiler classes used temporary files in an insecure way. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program. Under some circumstances, a...

DEBIAN-CVE-2006-5072

The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack...

CVE-2006-5072

CVE-2006-5072 concerns Mono’s System.CodeDom.Compiler usage, where temporary files are created with insecure permissions, enabling a local attacker to overwrite arbitrary files or inject/execute code via a symlink attack. The vulnerability affects Mono implementations across multiple distros, wit...