DSA-038-1 sgml-tools -- insecure tempfiles

Debian Security Advisory

DSA-038-1 sgml-tools -- insecure tempfiles

Date Reported:

08 Mar 2001

Affected Packages:

sgml-tools

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2001-0416.

More information:

Former versions of sgml-tools created temporary files directly in /tmp in an insecure fashion. Version 1.0.9-15 and higher create a subdirectory first and open temporary files within that directory. This has been fixed in sgml-tools 1.0.9-15

Fixed in:

Debian 2.2 (potato)

Source:

http://security.debian.org/dists/stable/updates/main/source/sgml-tools_1.0.9.orig.tar.gz

http://security.debian.org/dists/stable/updates/main/source/sgml-tools_1.0.9-15.dsc

http://security.debian.org/dists/stable/updates/main/source/sgml-tools_1.0.9-15.diff.gz

alpha:

http://security.debian.org/dists/stable/updates/main/binary-alpha/sgml-tools_1.0.9-15_alpha.deb

arm:

http://security.debian.org/dists/stable/updates/main/binary-arm/sgml-tools_1.0.9-15_arm.deb

i386:

http://security.debian.org/dists/stable/updates/main/binary-i386/sgml-tools_1.0.9-15_i386.deb

m68k:

http://security.debian.org/dists/stable/updates/main/binary-m68k/sgml-tools_1.0.9-15_m68k.deb

powerpc:

http://security.debian.org/dists/stable/updates/main/binary-powerpc/sgml-tools_1.0.9-15_powerpc.deb

sparc:

http://security.debian.org/dists/stable/updates/main/binary-sparc/sgml-tools_1.0.9-15_sparc.deb