PT-2002-1282 · Oracle · Tarantella Enterprise 3

Name of the Vulnerable Software and Affected Versions: Tarantella Enterprise 3 versions 3.01 through 3.20 Description: A race condition exists in the installation script, which creates a world-writeable temporary "gunzip" program before executing it. This could allow local users to execute...