CVE-2014-5255

概要

参考情報

• openwall.com/lists/oss-security/2014/08/15/4 · Mailing List
• securityfocus.com/bid/69020 · Third Party Advisory
• bugs.debian.org/cgi-bin/bugreport.cgi · Exploit
• bugs.gentoo.org/show_bug.cgi · Broken Link
• exchange.xforce.ibmcloud.com/vulnerabilities/95332 · Third Party Advisory
• security-tracker.debian.org/tracker/CVE-2014-5255 · Third Party Advisory

xcfa のその他の脆弱性

• CVE-2014-5254中 4.7xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.