Temporary File Creation Bug
Niels de Vos <[email protected]> Wed, 30 Mar 2005 09:37:31 +0200
| Newsgroups | gmane.linux.cluster.openmosix.mosixview |
|---|---|
| Message-ID | <[email protected]> |
--=-YUG5sVHHwcKOPXM3k/tx
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
Hello all,
I am following openMosix development and it's community. Today I
received my weekly mail from SecurityFocus. It mentioned 'Multiple
Insecure Temporary File Creation Vulnerabilities'[1] for openMosixView.
Not finding any messages in the ml-archive, made me send this mail to
the list. Hopefully one of the developers can fix this problem for the
next release and maybe report the fix to SecurityFocus. See the URL for
more details.
For the users of openMosixView:
The vulnerability is not very severe. No need to stress, disable
openMosixView or anything like that. Only local users _could_
exploid this bug. As long as your users of the cluster behave,
you're not in trouble.=20
This bug is published already, therefore my mail is send to the ml, not
directly to the developers.
Hope I can support the openMosix(View) community like this too. Finally
this message should hopefully lead to writing more secure code.
Furthermore I want to note that I'm not a member of this list. Any
replies need to be CCed to my sf.net address, thanks in advance.
Wish you all a nice day,
--=20
Niels de Vos
[email protected]
[1] http://www.securityfocus.com/bid/12902/
--=-YUG5sVHHwcKOPXM3k/tx
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQBCSlc7UHyL+FAJ7UYRArWsAKDpDiW2W2Q+XEjJKJP4HdY+CgWNggCgqql2
/gJ3QY+S/2sWQPzjoVdqsGI=
=2BT4
-----END PGP SIGNATURE-----
--=-YUG5sVHHwcKOPXM3k/tx--
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click