Description
sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools.
References
- RHSA-2001:027 vendor-advisory
- 2506 vdb-entry
- MDKSA-2001:030 vendor-advisory
- DSA-038 vendor-advisory
- 2683 vdb-entry
- SuSE-SA:2001:16 vendor-advisory
- sgmltools-symlink(6201) vdb-entry
- 20010316 Immunix OS Security update for sgml-tools mailing-list
- CLA-2001:390 vendor-advisory