Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Mindi creates files in /tmp which could allow local user to overwritearbitrary files.. - - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200309-05 - - --------------------------------------------------------------------- PACKAGE : mindi SUMMARY : insecure file creations DATE : 2003-09-02 10:37 UTC EXPLOIT : local VERSIONS AFFECTED : =mindi-0.86 CVE : CAN-2003-0617 - - --------------------------------------------------------------------- Mindi creates files in /tmp which could allow local user to overwrite arbitrary files. SOLUTION It is recommended that all Gentoo Linux users who are running sys-apps/mindi upgrade to mindi-0.86 as follows: emerge sync emerge mindi emerge clean - - ---------------------------------------------------------------------
mindi, a program for creating boot/root disks, does not takeappropriate security precautions when creating temporary files.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 362-1
Get the latest Linux and open source security news straight to your inbox.