Nessus Plugin #15009

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA172] DSA-172-1 tkmail

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-172-1 tkmail

Version:

$Revision: 1.4 $

Cve_id:

CVE-2002-1193

Bugtraq_id:

-

Xrefs:

DSA:172

Description:

It has been discovered that tkmail creates temporary files insecurely.
Exploiting this an attacker with local access can easily create and
overwrite files as another user.
This problem has been fixed in version 4.0beta9-8.1 for the current
stable distribution (woody), in version 4.0beta9-4.1 for the old
stable distribution (potato) and in version 4.0beta9-9 for the
unstable distribution (sid).
We recommend that you upgrade your tkmail packages.


Solution : http://www.debian.org/security/2002/dsa-172
Risk factor : High