3 matches found
Debian DSA-352-1 : fdclone - insecure temporary directory
fdclone creates a temporary directory in /tmp as a workspace. However, if this directory already exists, the existing directory is used instead, regardless of its ownership or permissions. This would allow an attacker to gain access to fdclone's temporary files and their contents, or replace them...
CVE-2003-0596
FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time...
CVE-2003-0596
FDclone 2.00a and all pre-2.02a versions are affected. The vulnerability arises from creating temporary workspaces in /tmp with predictable names and reusing them if the directory already exists, allowing local users to read or modify other users’ files by pre-creating the directory. Impact is li...