Bug 21 - Insecure tmp file handling in /usr/bin/xlsview
Summary: Insecure tmp file handling in /usr/bin/xlsview
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: catdoc (show other bugs)
Version: unstable
Hardware: all Linux
: P4 critical
Assignee: Dmitry V. Levin
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2001-09-29 18:12 MSD by Peter 'Nidd' Novodvorsky
Modified: 2003-08-25 15:18 MSD (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Peter 'Nidd' Novodvorsky 2001-09-29 18:12:52 MSD 
/usr/bin/xlsview script works with temporary files without security in mind.
---

---
Use mktemp.
Comment 1 Dmitry V. Levin 2002-04-16 14:05:47 MSD 
Fixed in
catdoc-0.91.5-alt3
Comment 2 Dmitry V. Levin 2002-04-16 14:05:47 MSD 
Fixed in
catdoc-0.91.5-alt3