Stefan Westerfeld ARTS Unspecified Insecure Temporary File Creation Vulnerability

Bugtraq ID:	10928
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 12 2004 12:00AM
Updated:	Aug 12 2004 12:00AM
Credit:	The discoverer of this issue is currently unknown.
Vulnerable:	Stefan Westerfeld aRts 1.1.2 Stefan Westerfeld aRts 1.1.1 Stefan Westerfeld aRts 0.6 Stefan Westerfeld aRts 0.5.4 Stefan Westerfeld aRts 0.5.2
Not Vulnerable:

Stefan Westerfeld ARTS Unspecified Insecure Temporary File Creation Vulnerability

aRts is reported prone to an unspecified insecure temporary file creation vulnerability. This issue may allow a local attacker to carry out a symbolic link attack.

This issue was reported in a SUSE advisory. Further information is not available at the moment. This BID will be updated as more information becomes available.

All versions of aRts are considered vulnerable to this issue.

Stefan Westerfeld ARTS Unspecified Insecure Temporary File Creation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Stefan Westerfeld ARTS Unspecified Insecure Temporary File Creation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Stefan Westerfeld ARTS Unspecified Insecure Temporary File Creation Vulnerability

References:

• aRts Project Homepage (Stefan Westerfeld)