Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: GLSA-200711-34 Normal: CSTeX Code Execution Threat

gentoo
Calendar Grey November 25, 2007
Scroller Gentoo
The application CSTeX running on the Gentoo system displays various security flaws that facilitate remote code execution and permit unauthorized local file modifications.
Multiple vulnerabilities were discovered in CSTeX, possibly allowing to execute arbitrary code or overwrite arbitrary files.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200711-34
                                            https://security.gentoo.org/

  Severity: Normal
     Title: CSTeX: Multiple vulnerabilities
      Date: November 25, 2007
      Bugs: #196673
        ID: 200711-34


Synopsis
=======
Multiple vulnerabilities were discovered in CSTeX, possibly allowing to
execute arbitrary code or overwrite arbitrary files.

Background
=========
CSTeX is a TeX distribution with Czech and Slovak support. It is used
for creating and manipulating LaTeX documents.

Affected packages
================
    -------------------------------------------------------------------
     Package           /  Vulnerable  /                     Unaffected
    -------------------------------------------------------------------
  1  app-text/cstetex     < 2.0.2-r2                       Vulnerable!
    ---------------------------------------------------------------...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo code execution file overwrite multiple vulnerabilities

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution file overwrite multiple vulnerabilities

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround