rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• [debian-devel] 20080812 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496368
• sgml2x-rlatex-symlink(44879) vdb-entry
• 30963 vdb-entry