Skip to content
OpenAdvisories
Unscored DSA-843-1 2 CVEs

arc - insecure temporary file

Published Oct 5, 2005 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 arc 5.21l-1sarge1

Vulnerabilities 2

  • Unscored —

    arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitiv…

  • Unscored —

    arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a differ…