Description
The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
References
- 12100 vdb-entry
- xdvizilla-symlink(18708) vdb-entry
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286370
- 20041223 [USN-51-1] teTeX auxiliary script vulnerability mailing-list