Gentoo: GLSA-200410-07 Normal: Ed Insecure File Access System Threat

Gentoo Linux Security Advisory GLSA 200410-07 https://security.gentoo.org/ Severity: Normal Title: ed: Insecure temporary file handling Date: October 09, 2004 Bugs: #66400 ID: 200410-07

Synopsis ======= The ed utility is vulnerable to symlink attacks, potentially allowing a local user to overwrite or change rights on arbitrary files with the rights of the user running ed, which could be the root user.
Background ========= ed is a line-oriented text editor, used to create or modify text files, both interactively and via shell scripts.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-apps/ed <= 0.2-r3 >= 0.2-r4
========== ed insecurely creates temporary files in world-writeable directories...