*** This bug is a security vulnerability ***

Public security bug reported:

Binary package hint: policyd-weight

References:
DSA-1531-2 (http://www.debian.org/security/2008/dsa-1531)

Quoting:
"Chris Howells discovered that policyd-weight, a policy daemon for the Postfix 
mail transport agent, created its socket in an insecure way, which may be 
exploited to overwrite or remove arbitary files from the local system."

** Affects: policyd-weight (Ubuntu)
     Importance: Undecided
         Status: New

** Visibility changed to: Public

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2008-1569

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2008-1570

** Summary changed:

- [policyd-weight] [CVE-2008-1569, CVE-2008-1570] insecurity temporary files
+ [policyd-weight] [CVE-2008-1569, CVE-2008-1570] insecure temporary files

-- 
[policyd-weight] [CVE-2008-1569, CVE-2008-1570] insecure temporary files
https://bugs.launchpad.net/bugs/210150
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to