Gentoo: GLSA-202304-07 Normal: Noweb Vulnerable File Handling Exposure

Gentoo Linux Security Advisory GLSA 200602-14 https://security.gentoo.org/ Severity: Normal Title: noweb: Insecure temporary file creation Date: February 26, 2006 Bugs: #122705 ID: 200602-14

Synopsis ======= noweb is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.
Background ========= noweb is a simple, extensible, and language independent literate programming tool.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-text/noweb < 2.9-r5 >= 2.9-r5
========== Javier Fernandez-Sanguino has discovered that the lib/toascii.nw and shell/roff.mm scripts insecurely create temporary files with predictable file...