This bug was fixed in the package open-iscsi - 2.0.870.1-0ubuntu11
---------------
open-iscsi (2.0.870.1-0ubuntu11) karmic; urgency=low
* open-iscsi-utils Replaces: old versions of open-iscsi.
* SECURITY UPDATE: temporary file vulnerability (LP: #408915)
- utils/iscsi_discovery: store iscsiadm -m discovery result in a
variable rather than writing it to an insecurely-created temporary
file
- CVE-2009-1297
-- Colin Watson <[email protected]> Mon, 24 Aug 2009 23:42:10 +0100
** Changed in: open-iscsi (Ubuntu Karmic)
Status: Confirmed => Fix Released
--
Temporary file vulnerability in iscsi_discovery
https://bugs.launchpad.net/bugs/408915
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs