Secunia

Debian has reported a vulnerability, which can be exploited by malicious, local users to overwrite certain files on the system.

The vulnerability has been identified in "psbanner" when configured as a filter and is caused due to insecure creation of the temporary file "/tmp/before" used for debugging purposes. The problem is that there are no checks to determine, whether the file already exists or is linked to another place.

Successful exploitation allows a malicious user to overwrite files on the system owned by the "daemon" user.

Solution
Updated packages:
Further details available in Customer Area

Provided and/or discovered by
Karol Lewandowski

Original Advisory
http://www.debian.org/security/2003/dsa-285

Deep Links
Links available in Customer Area