Gentoo Security Advisory GLSA 200709-04 (po4a)

The remote host is missing updates announced in advisory GLSA 200709-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2007-4462

CVE-2007-4462 affects po4a before 0.32. The Po4a code path lib/Locale/Po4a/Po.pm is vulnerable to a symlink race involving the temporary file gettextization.failed.po, allowing a local user to overwrite arbitrary files. The risk is described as a local attack with possible file overwrites (owners...