Gentoo: GLSA 200412-11 Normal Severity: Cscope Symlink Attack Risk

Linux Security Advisory GLSA 200412-11 https://security.gentoo.org/ Severity: Normal Title: Cscope: Insecure creation of temporary files Date: December 16, 2004 Bugs: #71595 ID: 200412-11

Synopsis ======= Cscope is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.
Background ========= Cscope is a developer utility used to browse and manage source code.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-util/cscope < 15.5-r2 >= 15.5-r2
========== Cscope creates temporary files in world-writable directories with predictable names.
Impact ===== A local attacker could create symbolic links in the temporary files d...