CAN-2004-0559

Usermin maketemp.pl in versions 1.070 and 1.080 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/.usermin directory during installation. Root cause: insecure temporary directory handling in maketemp.pl; attacker can pre-create the directory and place a symlink to a...