• info
• discussion
• exploit
• solution
• references

Fuzz Insecure Temporary File Creation Vulnerability

Solution:
Debian has released a security advisory (DSA 302-1) containing fixes to address this issue. Users are advised to upgrade their fuzz packages as soon as possible.


Fuzz Fuzz 0.6

• Debian fuzz_0.6-6woody1_alpha.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_a lpha.deb


• Debian fuzz_0.6-6woody1_arm.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_a rm.deb


• Debian fuzz_0.6-6woody1_hppa.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_h ppa.deb


• Debian fuzz_0.6-6woody1_i386.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_i 386.deb


• Debian fuzz_0.6-6woody1_ia64.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_i a64.deb


• Debian fuzz_0.6-6woody1_m68k.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_m 68k.deb


• Debian fuzz_0.6-6woody1_mips.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_m ips.deb


• Debian fuzz_0.6-6woody1_mipsel.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_m ipsel.deb


• Debian fuzz_0.6-6woody1_powerpc.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_p owerpc.deb


• Debian fuzz_0.6-6woody1_s390.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_s 390.deb


• Debian fuzz_0.6-6woody1_sparc.deb
  http://security.debian.org/pool/updates/main/f/fuzz/fuzz_0.6-6woody1_s parc.deb