CVE-2012-2120
Priority
Negligible
Description
latex2man in texlive-extra-utils 2011.20120322, and possibly other versions
or packages, when used with the H or T option, allows local users to
overwrite arbitrary files via a symlink attack on a temporary file.
or packages, when used with the H or T option, allows local users to
overwrite arbitrary files via a symlink attack on a temporary file.
References
Notes
jdstrand> Ubuntu 10.10 have symlink protections in place
Package
| Upstream: | needs-triage |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 12.04 LTS (Precise Pangolin): | needed |
| Ubuntu 12.10 (Quantal Quetzal): | needed |
| Ubuntu 13.04 (Raring Ringtail): | needed |
| Ubuntu 13.10 (Saucy Salamander): | needed |