Mandrake Linux Security Advisory : tripwire (MDKSA-2001:064)

Jarno Juuskonen reported that a temporary file vulnerability exists in versions of Tripwire prior to 2.3.1-2. Because Tripwire opens/creates temporary files in /tmp without the OEXCL flag during filesystem scanning and database updating, a malicious user could execute a symlink attack against the...