Summary
The remote host is missing an update to tkmail
announced via advisory DSA 172-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20172-1
Insight
It has been discovered that tkmail creates temporary files insecurely.
Exploiting this an attacker with local access can easily create and overwrite files as another user.
This problem has been fixed in version 4.0beta9-8.1 for the current stable distribution (woody), in version 4.0beta9-4.1 for the old stable distribution (potato) and in version 4.0beta9-9 for the unstable distribution (sid).
We recommend that you upgrade your tkmail packages.
Severity
Classification
-
CVE CVE-2002-1193 -
CVSS Base Score: 2.1
AV:L/AC:L/Au:N/C:N/I:P/A:N
Related Vulnerabilities