Customer Area
Need help?
Try CSI
Scan Now
Secunia Advisory SA31418Amarok "MagnatuneBrowser::listDownloadComplete()" Insecure Temporary Files
|
||||||||||||||||||||||||||||||||||||||||||||||||||||
Description
A security issue has been reported in Amarok, which can be exploited by malicious, local users to perform certain actions with escalated privileges. The security issue is caused due to the "MagnatuneBrowser::listDownloadComplete()" function handling temporary files in an insecure manner. This can be exploited via symlink attacks in combination with a race condition to overwrite arbitrary files with the privileges of the user running the application. The security issue is reported in version 1.4.9.1. Prior versions may also be affected. Solution Provided and/or discovered by Deep Links Do you have additional information related to this advisory?Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
|
||||||||||||||||||||||||||||||||||||||||||||||||||||
Latest advisories
New advisories: 32
New vulnerabilities: 152
Updated advisories: 45
See all
New vulnerabilities: 152
Updated advisories: 45
4,267 views 152 views |  |
| Gentoo update for sarg | |
 211 views | |
| Debian update for freetype | |
245 views
