Gentoo Security Advisory GLSA 200511-19 (eix)

The remote host is missing updates announced in advisory GLSA 200511-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2005-3785

Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX eix before 0.5.0pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program...

CVE-2005-3785

The CVE-2005-3785 issue affects eix (Ebuild IndeX) prior to 0.5.0_pre2, where a second-order symlink vulnerability in the eix-sync.in path allows a local user to overwrite arbitrary files via a symlink to the exi.X.sync temporary file, processed by diff-eix. Exploitation is local and depends on c...