Debian Security Advisory
DSA-038-1 sgml-tools -- insecure tempfiles
- Date Reported:
- 08 Mar 2001
- Affected Packages:
- sgml-tools
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2001-0416.
- More information:
- Former versions of sgml-tools created temporary files directly in /tmp in an insecure fashion. Version 1.0.9-15 and higher create a subdirectory first and open temporary files within that directory. This has been fixed in sgml-tools 1.0.9-15
- Fixed in:
-
Debian 2.2 (potato)
- Source:
-
http://security.debian.org/dists/stable/updates/main/source/sgml-tools_1.0.9.orig.tar.gz
-
http://security.debian.org/dists/stable/updates/main/source/sgml-tools_1.0.9-15.dsc
-
http://security.debian.org/dists/stable/updates/main/source/sgml-tools_1.0.9-15.diff.gz
- alpha:
-
http://security.debian.org/dists/stable/updates/main/binary-alpha/sgml-tools_1.0.9-15_alpha.deb
- arm:
-
http://security.debian.org/dists/stable/updates/main/binary-arm/sgml-tools_1.0.9-15_arm.deb
- i386:
-
http://security.debian.org/dists/stable/updates/main/binary-i386/sgml-tools_1.0.9-15_i386.deb
- m68k:
-
http://security.debian.org/dists/stable/updates/main/binary-m68k/sgml-tools_1.0.9-15_m68k.deb
- powerpc:
-
http://security.debian.org/dists/stable/updates/main/binary-powerpc/sgml-tools_1.0.9-15_powerpc.deb
- sparc:
-
http://security.debian.org/dists/stable/updates/main/binary-sparc/sgml-tools_1.0.9-15_sparc.deb