Skip to Content.
Sympa Menu

sm-security - [SM-Security] [Bug 7530] [sorcery/installwatch] insecure tmp file handling vulnerability

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: bugzilla-daemon AT metalab.unc.edu
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] [Bug 7530] [sorcery/installwatch] insecure tmp file handling vulnerability
  • Date: Mon, 18 Oct 2004 11:50:14 -0400

http://bugs.sourcemage.org/show_bug.cgi?id=7530

seth AT tautology.org changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |acedit AT armory.com



------- Additional Comments From seth AT tautology.org 2004-10-18 11:50 -------
Thanks for reporting this, we must have missed it in the last "fix kyle's bad
/tmp code" run.

I presume this is a good candidate for placing in /tmp/sorcery/ like most of
the
other tmp variables, Andrew (added to CC)?

Sorry for the long wait for reply, I didn't have access to the computer all
weekend.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




Archive powered by MHonArc 2.6.24.

Top of Page