Author: JT Smith
From Help Net Security: “Ben Collins identified a temporary file race in the Utah-glx component of the
Mesa package which affects Linux-Mandrake 7.2. The /tmp/glxmemory file is
created by Utah-glx and because it is not created securely could be used in a
symlink attack which allows files to be overwritten the next time the X server
is started.”
Mesa package which affects Linux-Mandrake 7.2. The /tmp/glxmemory file is
created by Utah-glx and because it is not created securely could be used in a
symlink attack which allows files to be overwritten the next time the X server
is started.”
Category:
- Linux