tags 338920 + patch
thanks,
Jason Hoover @ 2005-11-13 (Sunday), 15:26 (-0500)
> Migrationtools leaves insecure temporary files containing information from
> /etc/shadow.
Attached is a patch that calls mktemp at appropriate places. I took the
liberty to change the variable names used from TMPDIR
Package: migrationtools
Version: 46-1
Severity: critical
Tags: security
Justification: root security hole
Migrationtools leaves insecure temporary files containing information from
/etc/shadow.
When it fails to add information, it creates files like
nis..ldif which are world
readable. This ca
2 matches
Mail list logo
