Security Advisory (MDKSA-2004:011): netpbm

[aru]

MandrakeSoft Security Advisory MDKSA-2004:011 : netpbm

 

February 11th, 2004

Updated NetPBM packages fix a number of temporary file bugs.

 

A number of temporary file bugs have been found in versions of NetPBM. These could allow a local user the ability to overwrite or create files as a different user who happens to run one of the the vulnerable utilities.

 

 

The released versions of Mandrake GNU/Linux affected are:

• 9.1
  
• 9.2
  
• 9.2/AMD64
  
• Multi Network Firewall 8.2
  
• Corporate Server 2.1
  

Full information about this advisory, including the updated packages, is available at:

www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:011

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2003-0924

 

Posted automatically by aru (mdksec2mub v0.0.8)