Debian DSA-160-1 : scrollkeeper - insecure temporary file creation

Spybreak discovered a problem in scrollkeeper, a free electronic cataloging system for documentation. The scrollkeeper-get-cl program creates temporary files in an insecure manner in /tmp using guessable filenames. Since scrollkeeper is called automatically when a user logs into a Gnome session, ...

CVE-2002-0662

scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper-tempfile.x temporary files...

CVE-2002-0662

CVE-2002-0662 affects ScrollKeeper 0.3 to 0.3.11. The vulnerability is due to insecure temporary file creation in /tmp by the scrollkeeper-get-cl program, enabling a local attacker to create or overwrite files via a symlink-like attack on scrollkeeper-tempfile.x. Debian advisories note the issue ...

CVE-2002-0662

scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper-tempfile.x temporary files...

CVE-2002-0662

...