The host has OpenOffice installed and is prone to Insecure Temporary File Creation Vulnerability.

Successful exploitation allows attackers to delete or corrupt sensitive files, which may result in a denial of service condtion. Impact Level: Application

Upgrade OpenOffice to higher version. http://download.openoffice.org/index.html

The flaw exists due to OpenOffice 'senddoc' which creates temporary files in an insecure manner, which allows users to overwrite files via a symlink attack on a /tmp/log.obr.##### temporary file.

OpenOffice.org 2.4.1 on Linux.

• http://www.openwall.com/lists/oss-security/2008/10/30/2

---

Updated on 2017-03-28