Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

wyrd Insecure Temporary File Creation Vulnerability

The 'wyrd' program is prone to a security vulnerability that allows attackers to create temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.

Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.

This issue affects wyrd 1.4.3-b3; other versions may also be vulnerable.







 

Privacy Statement
Copyright 2009, SecurityFocus