CVE-2014-5260

Summary (CVE-2014-5260) : The mkxmltype and mkdtskel scripts in XML-DT (pre-0.64) allow local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp. This is a local-privilege-impact issue with a base score of 6.3 (medium). The vulnerability is fixed in XML-DT 0.64...