Flite 'play_wave_from_socket()' Insecure Temporary File Creation Vulnerability
BID:64791
Info
Flite 'play_wave_from_socket()' Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 64791 |
| Class: | Design Error |
| CVE: |
CVE-2014-0027 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 10 2014 12:00AM |
| Updated: | May 07 2015 05:07PM |
| Credit: | Florian Weimer of the Red Hat Product Security Team. |
| Vulnerable: |
Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Hephaestus Flite 1.4 |
| Not Vulnerable: | |
Solution / Fix
Flite 'play_wave_from_socket()' Insecure Temporary File Creation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Mandriva Business Server 1 X86 64
-
Mandriva flite-1.3-2.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva lib64flite-devel-1.3-2.1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
Flite 'play_wave_from_socket()' Insecure Temporary File Creation Vulnerability
References:
References:
- Flite Homepage (Hephaestus)
- CVE-2014-0027 flite: insecure temporary file use (Red Hat Bugzilla)
- CVE-2014-0027 flite: insecure temporary file use (Red Hat)