Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Gentoo: GLSA-200803-23 Normal: Website META Language Temp File Risk

gentoo
Calendar Grey March 15, 2008
Scroller Gentoo
Vulnerable ephemeral data detected in Web Page Markup Language on Gentoo. Action required to reduce threats. Learn more.
Multiple insecure temporary file vulnerabilities have been discovered in the Website META Language.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200803-23
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Website META Language: Insecure temporary file usage
      Date: March 15, 2008
      Bugs: #209927
        ID: 200803-23


Synopsis
=======
Multiple insecure temporary file vulnerabilities have been discovered
in the Website META Language.

Background
=========
Website META Language is a free and extensible Webdesigner's off-line
HTML generation toolkit for Unix.

Affected packages
================
    -------------------------------------------------------------------
     Package       /   Vulnerable   /                       Unaffected
    -------------------------------------------------------------------
  1  dev-lang/wml      < 2.0.11-r3                        >= 2.0.11-r3

==========
Temporary files are handled insecurely in the files
wml_backend/p1_ipp/ipp.src,...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo local privilege escalation temporary file symlink attack normal severity website meta language

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo local privilege escalation temporary file symlink attack normal severity website meta language

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround