Re: HeliSec: StarOffice symlink exploit

[Christian <christian () dijkstra MURDOCH EDU AU>]

On Sat, Feb 17, 2001 at 04:57:23PM +0100, JeT Li wrote:

>       StarOffice creates a temporary directory in /tmp called soffice.tmp,
> with permissions 0777. Into this directory other temporary files are creates,
> with the format: svZZZZ.tmp, where ZZZZ in a four or five digits number.

<snip>

I reported this problem to BUGTRAQ on November 8, 2000.  See
http://www.securityfocus.com/bid/1922 for more details.  I believe Sun
has now released patches for this issue.  It always helps to do a search
before reporting a "new" vulnerability. :-)

Regards,

Christian.