CVE-2008-1570

Race condition in the createlockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569...

Bogofilter symbolic links problem

file /tmp/bogopass.$$ is created without symbolic link check...

Дырка в bash (temp files)

При многострочном вводе пользователя создается временный файл без проверки символьных линков...