Mandrake Linux Security Advisory : eroaster (MDKSA-2003:083)

A vulnerability was discovered in eroaster where it does not take any security precautions when creating a temporary file for the lockfile. This vulnerability could be exploited to overwrite arbitrary files with the privileges of the user running eroaster. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2003-0656

CVE-2003-0656 affects eroaster; a local user can overwrite arbitrary files by exploiting a symlink attack on the temporary lockfile used during operation. Public advisories (Debian DSA-366-1 and related entries) describe the issue as insecure temporary file creation. The vulnerability is fixed in...

CVE-2003-0656

eroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file that is used as a lockfile...