Linux Today: Linux News On Internet Time.

More on LinuxToday

Security Linux News for Jun 21, 2001

  • Turbolinux Security Announcement: esound (Jun 21, 2001, 20:19)
    " Esound creates a world-writable directory called /tmp/.esd, which is owned by the user running esound. It stores a socket which is shared by the programs using esound. When esound is started, the socket becomes world-writable. During this time, it is possible for an attacker to cre- ate a symbolic link in /tmp/.esd to a file owned by the esound user and make that file world-writable."