CVEvulnerability
CVE-2014-5260
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.3 MEDIUM — AV:L/AC:M/Au:N/C:N/I:C/A:C
- Weaknesses
- CWE-59
Description
The (1) mkxmltype and (2) mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_xml_##### temporary file.
Affected configurations
• xml-dt project xml-dt (<= 0.63)
• xml-dt project xml-dt 0.60
• xml-dt project xml-dt 0.61
• xml-dt project xml-dt 0.62
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- http://openwall.com/lists/oss-security/2014/08/15/8 openwall.com
- https://bugs.debian.org/756566 bugs.debian.org
- https://metacpan.org/diff/file?target=AMBS/XML-DT-0.64/&source=AMBS/XML-DT-0.63/ metacpan.org
- https://metacpan.org/source/AMBS/XML-DT-0.66/Changes metacpan.org
- http://openwall.com/lists/oss-security/2014/08/15/8 openwall.com
- https://bugs.debian.org/756566 bugs.debian.org
- https://metacpan.org/diff/file?target=AMBS/XML-DT-0.64/&source=AMBS/XML-DT-0.63/ metacpan.org
- https://metacpan.org/source/AMBS/XML-DT-0.66/Changes metacpan.org