Gentoo: GLSA-200804-09 Normal: am-utils Insecure File Creation

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200804-09
                                            https://security.gentoo.org/

  Severity: Normal
     Title: am-utils: Insecure temporary file creation
      Date: April 10, 2008
      Bugs: #210158
        ID: 200804-09


Synopsis
=======
am-utils creates temporary files insecurely allowing local users to
overwrite arbitrary files via a symlink attack.

Background
=========
am-utils is a collection of utilities for use with the Berkeley
Automounter.

Affected packages
================
    -------------------------------------------------------------------
     Package          /  Vulnerable  /                      Unaffected
    -------------------------------------------------------------------
  1  net-fs/am-utils       < 6.1.5                            >= 6.1.5

==========
Tavis Ormandy discovered that, when creating temporary files, the
'expn' utility does not check whet...
Read the Full Advisory