openSUSE Security Update : wine (wine-484)

A symlink vulnerability in handling tmp files in the winetricks helper scripts was fixed. CVE-2009-0313 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update wine-484. The text description of this...

CVE-2009-0313

Summary: CVE-2009-0313 concerns winetricks prior to 20081223, where a symlink vulnerability in handling temporary x_showmenu.txt files permits local users to overwrite arbitrary files. Affected components: winetricks (before 20081223). Root cause: symlink attack during creation/usage of a tempora...