tocsin

Debian/munin: unknown

The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

Action: Upgrade munin to 2.0~rc6-1 or later.

Affected

introducedfixedlast affected
02.0~rc6-1-

Fixed versions

2.0~rc6-1

Sources

published · modified · JSON