Gentoo: 'mindi' temporary file vulnerability
Posted by LinuxSecurity.com Team   
Gentoo Mindi creates files in /tmp which could allow local user to overwritearbitrary files.

- - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200309-05
- - ---------------------------------------------------------------------

          PACKAGE : mindi
          SUMMARY : insecure file creations
             DATE : 2003-09-02 10:37 UTC
          EXPLOIT : local
VERSIONS AFFECTED : =mindi-0.86
              CVE : CAN-2003-0617

- - ---------------------------------------------------------------------

Mindi creates files in /tmp which could allow local user to overwrite
arbitrary files.

SOLUTION

It is recommended that all Gentoo Linux users who are running
sys-apps/mindi upgrade to mindi-0.86 as follows:

emerge sync
emerge mindi
emerge clean

- - ---------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at  http://dev.gentoo.org/~aliz
- - ---------------------------------------------------------------------