• info
• discussion
• exploit
• solution
• references

Xine Bug Reporting Script Insecure Temporary File Creation Vulnerability

Solution:
Updates are available. Please see the referenced advisories for more information.


xine xine-ui 0.9.22

• Mandrake xine-ui-0.9.22-5.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake xine-ui-0.9.22-5.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake xine-ui-aa-0.9.22-5.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake xine-ui-aa-0.9.22-5.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake xine-ui-fb-0.9.22-5.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake xine-ui-fb-0.9.22-5.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php

xine xine-ui 0.9.23

• Mandrake xine-ui-0.9.23-3.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake xine-ui-aa-0.9.23-3.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake xine-ui-fb-0.9.23-3.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php

xine xine 0.9.8

• Debian xine-ui_0.9.8-5.1_alpha.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_alpha.deb


• Debian xine-ui_0.9.8-5.1_arm.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_arm.deb


• Debian xine-ui_0.9.8-5.1_hppa.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_hppa.deb


• Debian xine-ui_0.9.8-5.1_i386.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_i386.deb


• Debian xine-ui_0.9.8-5.1_ia64.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_ia64.deb


• Debian xine-ui_0.9.8-5.1_m68k.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_m68k.deb


• Debian xine-ui_0.9.8-5.1_mips.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_mips.deb


• Debian xine-ui_0.9.8-5.1_mipsel.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_mipsel.deb


• Debian xine-ui_0.9.8-5.1_powerpc.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_powerpc.deb


• Debian xine-ui_0.9.8-5.1_s390.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_s390.deb


• Debian xine-ui_0.9.8-5.1_sparc.deb
  Debian GNU/Linux 3.0 (woody)
  http://security.debian.org/pool/updates/main/x/xine-ui/xine-ui_0.9.8-5 .1_sparc.deb


• Fedora Legacy xine-0.9.8-4.2.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/xine-0.9.8-4. 2.legacy.i386.rpm


• Fedora Legacy xine-devel-0.9.8-4.2.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/xine-devel-0. 9.8-4.2.legacy.i386.rpm