Mandrake Linux Security Advisory : kdeedu (MDKSA-2005:159)

Ben Burton notified the KDE security team about several tempfile handling related vulnerabilities in langen2kvtml, a conversion script for kvoctrain. This vulnerability was initially discovered by Javier Fernndez-Sanguino Pea. The script uses known filenames in /tmp which allow an local attacker ...

Fedora Core 3 : kdeedu-3.4.2-0.fc3.2 (2005-745)

Ben Burton notified the KDE security team about several tempfile handling related vulnerabilities in langen2kvtml, a conversion script for kvoctrain. The script must be manually invoked. The script uses known filenames in /tmp which allow an local attacker to overwrite files writeable by the user...

CVE-2005-2101

CVE-2005-2101 affects KDE kdeedu: specifically the langen2kvtml script in the kvoctrain component creates insecure temporary files in /tmp with predictable names, allowing a local attacker to overwrite arbitrary files. Multiple vendors/advisories (Debian DSA-818-1, Mandrake/MKSA-2005:159, SUSE, O...

KDE langen2kvtml symbolic links problem

Insecure temporary file creation...