oss-security - CVE request

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Fri, 19 Dec 2008 19:16:37 +0100
From: Tomas Hoger <thoger@...hat.com>
To: OSS Security <oss-security@...ts.openwall.com>
Cc: coley@...re.org
Subject: CVE request - pdfjam

Hi!

Insecure temporary file handling flaw was reported for pdfjam:

https://bugzilla.novell.com/show_bug.cgi?id=459031

Issue affects all 3 scripts shipped in pdfjam: pdf90, pdfjoin and pdfnup

They create various temporary files in tempfileDir (/var/tmp), process
id ($$) is used for file name uniqueness.

-- 
Tomas Hoger / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.