chm2pdf Insecure Temporary File Creation or DoS Vulnerability

This host is installed with chm2pdf and is prone to Insecure Temporary File Creation or Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbchm2pdfinsectmpfilecrtnvuln.nasl 4218 2016-10-05 14:20:48Z teissa $ chm2pdf Insecure Temporary File Creation or DoS Vulnerability Authors:...

CVE-2008-5298

Removed by vendor...

CVE-2008-5298

chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service chm2pdf failure of other users by creating those directories ahead of time...

CVE-2006-2660

Summary: CVE-2006-2660 is a buffer/path length vulnerability in PHP’s tempnam() related to long pathnames. Affected versions: PHP 5.1.4 and PHP 4.x prior to 4.4.3. Impact (as stated): Local users can bypass restrictions and create PHP files with fixed names in other directories due to MAXPATHLEN–...