Linux Today: Linux News On Internet Time.
Search Linux Today
Linux News Sections:  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Contribute
Contribute
Link to Us
Linux Jobs






More on LinuxToday

Security Linux News for Jun 21, 2001

  • Turbolinux Security Announcement: esound (Jun 21, 2001, 20:19)
    " Esound creates a world-writable directory called /tmp/.esd, which is owned by the user running esound. It stores a socket which is shared by the programs using esound. When esound is started, the socket becomes world-writable. During this time, it is possible for an attacker to cre- ate a symbolic link in /tmp/.esd to a file owned by the esound user and make that file world-writable."