CVE-2014-1639

CVE-2014-1639 affects syncevolution installations where the script installcheck-local.sh (before 1.3.99.7) creates a temporary file insecurely using mktemp and then appends a suffix to the original filename, enabling a local attacker to perform a symlink attack and overwrite arbitrary files. The ...