Gentoo Security Advisory GLSA 200901-14 (scilab)

The remote host is missing updates announced in advisory GLSA 200901-14. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-200901-14 : Scilab: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-200901-14 Scilab: Insecure temporary file usage Dmitry E. Oboukhov reported an insecure temporary file usage within the scilink, scidoc and scidem scripts. Impact : A local attacker could perform symlink attacks to overwrite...

CVE-2008-4983

scilab-bin 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/SciLink1, b /tmp/SciLink2, c /tmp/SciLink3, d /tmp/., e /tmp/..res, f /tmp/..err, and g /tmp/..diff temporary files, related to the 1 scilink, 2 scidoc, and 3 scidem scripts...

CVE-2008-4983

CVE-2008-4983 affects scilab-bin 4.1.2. A local attacker can exploit insecure temporary file handling (symlink attacks) in the scilink, scidoc and scidem scripts to overwrite arbitrary files under /tmp and potentially affect files owned by the running user. Remediation per Gentoo GLSA 200901-14 i...