Gentoo: GLSA-200703-20 Low-Level Risk from LSAT Symlink Attack

Gentoo Linux Security Advisory GLSA 200703-20 https://security.gentoo.org/ Severity: Low Title: LSAT: Insecure temporary file creation Date: March 18, 2007 Bugs: #159542 ID: 200703-20

Synopsis ======= LSAT insecurely creates temporary files which can lead to symlink attacks allowing a local user to overwrite arbitrary files.
Background ========= The Linux Security Auditing Tool (LSAT) is a post install security auditor which checks many system configurations and local network settings on the system for common security or configuration errors and for packages that are not needed.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-admin/lsat <= 0.9.2 Vu...