Description (CNA)
On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the O_EXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by symlink and hardlink restrictions in Ubuntu. Fixed in 1.1.1188+14.10.20140813.4-0ubuntu1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Canonical / ubuntu-ui-toolkit | affected 1.1.1188 before 1.1.1188+14.10.20140813.4-0ubuntu1 |
CWE
CWE-59
References
- https://launchpad.net/bugs/1348241
- http://bazaar.launchpad.net/~ubuntu-sdk-team/ubuntu-ui-toolkit/staging/revision/1182
ADP enrichment
No English description supplied.