Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

HTML Headline Temporary File Symbolic Link Vulnerabilities

It has been reported that there are numerous instances in HtmlHeadline where insecure temporary files are used. According to the report, it is possible for at least some of these instances to be exploited to corrupt files on the filesystem. It is likely that HtmlHeadline creates and writes to temporary files in the world writeable "/tmp" with predictable filenames.







 

Privacy Statement
Copyright 2008, SecurityFocus