Hugin: Insecure temporary file creation — GLSA 200712-01

A vulnerability has been discovered in Hugin, potentially allowing for a Denial of Service.

Affected packages

Background

Hugin is a GUI for creating and processing panoramic images.

Description

Suse Linux reported that Hugin creates the "hugin_debug_optim_results.txt" temporary file in an insecure manner.

Impact

A local attacker could exploit this vulnerability with a symlink attack, potentially overwriting an arbitrary file with the privileges of the user running the application.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=media-gfx/hugin-0.6.1-r1"

References

• CVE-2007-5200

Release date
December 05, 2007

Latest revision
December 05, 2007: 01

Severity
normal

Exploitable
local

Bugzilla entries

• 195996