Welcome to our website
To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.
mime-support Update for Debian
Posted by philipp on: 04/23/2003 03:57 PM [ Print | 0 comment(s) ]
A mime-support update for Debian GNU/Linux has been released
Colin Phipps discovered several problems in mime-support, that contains support programs for the MIME control files 'mime.types' and 'mailcap'. When a temporary file is to be used it is created insecurely, allowing an attacker to overwrite arbitrary under the user id of the person executing run-mailcap, most probably root. Additionally the program did not properly escape shell escape characters when executing a command. This is unlikely to be exploitable, though.