Gentoo Security Advisory GLSA 201402-10

Gentoo Linux Local Security Checks GLSA 201402-10 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

CVE-2009-1299

The pamakesecuredir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd- temporary file...

CVE-2009-1299

PulseAudio 0.9.10–0.9.19 is affected by CVE-2009-1299 due to the pa_make_secure_dir insecure handling of temporary files, enabling local symlink attacks to overwrite arbitrary files. Advisories (Gentoo GLSA 201402-10, Debian DSA-2017-1, Mandriva MDVSA-2010:124) indicate the issue and recommend up...