Description
StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice.
References
- staroffice-tmp-sym-link(5487) vdb-entry
- 20001108 StarOffice 5.2 Temporary Dir Vulnerability mailing-list
- 1922 vdb-entry