Description
The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure permissions, which allows local users to read sensitive ISO images.
References
- 14855 vdb-entry
- 20050915 SimpleCDR-X - Insecure tempfile handling mailing-list
- 16835 third-party-advisory