OSVDB ID: 13459

Title: Newsgrab Downloaded File Symlink Arbitrary File Overwrite

Info

Disclosure

Jan 28, 2005

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Location: Local Access Required
Attack Type: Race Condition

Solution

Upgrade to version 0.5.0pre4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Vendor Specific News/Changelog Entry: http://sourceforge.net/project/shownotes.php?release_id=300562
Secunia Advisory ID: 14083
CVE ID: 2005-0153 (see also: NVD)
Security Tracker: 1013055
Vendor URL: http://newsgrab.sourceforge.net/

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/36218