Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Gentoo: GLSA-200506-13 Normal: webapp-config Poor File Handling Risk

gentoo
Calendar Grey June 17, 2005
Scroller Gentoo
The advisory issued by Gentoo, GLSA 200506-14, points out vulnerabilities in the file upload handling within media-app, presenting a threat of remote exploitation.
The webapp-config utility insecurely creates temporary files in a world writable directory, potentially allowing the execution of arbitrary commands

Summary

Gentoo Linux Security Advisory GLSA 200506-13 https://security.gentoo.org/ Severity: Normal Title: webapp-config: Insecure temporary file handling Date: June 17, 2005 Bugs: #91785, #88831 ID: 200506-13

Synopsis ======= The webapp-config utility insecurely creates temporary files in a world writable directory, potentially allowing the execution of arbitrary commands.
Background ========= webapp-config is a Gentoo Linux utility to help manage the installation of web-based applications.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-www/webapp-config < 1.11 >= 1.11
========== Eric Romang discovered webapp-config uses a predictable temporary filenam...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo temporary file arbitrary commands execution risk normal severity webapp-config

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo temporary file arbitrary commands execution risk normal severity webapp-config

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround