TkDiff Insecure Temporary File Creation Vulnerability

Bugtraq ID: 16064
Class: Design Error
CVE: CVE-2005-3343
Remote: No
Local: Yes
Published: Dec 27 2005 12:00AM
Updated: May 18 2006 07:53PM
Credit: Discovered by Javier Fernandez-Sanguino Pena.
Vulnerable: TkDiff TkDiff 4.1
TkDiff TkDiff 4.0.2
+ Debian Linux 3.1 sparc
 + Debian Linux 3.1 s/390
 + Debian Linux 3.1 ppc
 + Debian Linux 3.1 mipsel
 + Debian Linux 3.1 mips
 + Debian Linux 3.1 m68k
 + Debian Linux 3.1 ia-64
 + Debian Linux 3.1 ia-32
 + Debian Linux 3.1 hppa
 + Debian Linux 3.1 arm
 + Debian Linux 3.1 amd64
 + Debian Linux 3.1 alpha
 + Debian Linux 3.1
TkDiff TkDiff 4.0
TkDiff TkDiff 3.0.9
TkDiff TkDiff 3.0.8
+ Debian Linux 3.0 sparc
 + Debian Linux 3.0 s/390
 + Debian Linux 3.0 ppc
 + Debian Linux 3.0 mipsel
 + Debian Linux 3.0 mips
 + Debian Linux 3.0 m68k
 + Debian Linux 3.0 ia-64
 + Debian Linux 3.0 ia-32
 + Debian Linux 3.0 hppa
 + Debian Linux 3.0 arm
 + Debian Linux 3.0 alpha
 + Debian Linux 3.0
TkCVS TkCVS 7.2.2
Mandriva Linux Mandrake 2006.0 x86_64
Mandriva Linux Mandrake 2006.0
Mandriva Linux Mandrake 10.2 x86_64
Mandriva Linux Mandrake 10.2
Not Vulnerable: TkDiff TkDiff 4.1.1


 

Privacy Statement
Copyright 2010, SecurityFocus