Launchpad.net

Launchpad CVE tracker

CVE 2005-3343

tkdiff before 4.1.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

See the

CVE page on Mitre.org for more details.

References

DEBIAN: DSA-927
BID: 16064
OSVDB: 21933
SECUNIA: 18083
SECUNIA: 18215
SECTRACK: 1015421
MANDRIVA: MDKSA-2006:001
CONFIRM: http://sourceforge.net...
XF: tkdiff-tmp-file-symlin...