ALT-PU-2014-1698-1
Closed vulnerabilities
Published: 2011-10-13
BDU:2015-09424
Уязвимость операционной системы Gentoo Linux, позволяющая злоумышленнику нарушить целостность и доступность защищаемой информации
Severity: MEDIUM (6.3)
References:
Published: 2011-11-05
Modified: 2012-03-12
Modified: 2012-03-12
CVE-2011-3616
The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf.
Severity: MEDIUM (6.3)
References:
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=612033
- 43225
- GLSA-201110-09
- [oss-security] 20111009 CVE Request -- Conky 1.8.1 "/tmp/.cesf" Insecure Temporary File Security Issue
- 46353
- https://bugs.launchpad.net/ubuntu/+source/conky/+bug/607309
- [oss-security] 20111010 Re: CVE Request -- Conky 1.8.1 "/tmp/.cesf" Insecure Temporary File Security Issue