USN-657-1: Amarok vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-657-1: Amarok vulnerability
# 1  
Old 10-21-2008
USN-657-1: Amarok vulnerability

Referenced CVEs:
CVE-2008-3699


Description:
===========================================================Ubuntu Security Notice USN-657-1 October 21, 2008amarok vulnerabilityCVE-2008-3699===========================================================A security issue affects the following Ubuntu releases:Ubuntu 7.10Ubuntu 8.04 LTSThis advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 7.10: amarok 2:1.4.7-0ubuntu3.1Ubuntu 8.04 LTS: amarok 2:1.4.9.1-0ubuntu3.1After a standard system upgrade you need to restart Amarok to effectthe necessary changes.Details follow:Dwayne Litzenberger discovered that Amarok created temporary files inan insecure way. Local users could exploit a race condition to createor overwrite files with the privileges of the user invoking theprogram. (CVE-2008-3699)





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
LIBMTP_file_struct(3)						      libmtp						     LIBMTP_file_struct(3)

NAME
libmtp - LIBMTP_file_struct SYNOPSIS
#include <libmtp.h> Data Fields uint32_t item_id uint32_t parent_id uint32_t storage_id char * filename uint64_t filesize time_t modificationdate LIBMTP_filetype_t filetype LIBMTP_file_t * next Detailed Description MTP file struct Examples: delfile.c, detect.c, files.c, getfile.c, newfolder.c, sendfile.c, and sendtr.c. Field Documentation char* LIBMTP_file_struct::filename Filename of this file Examples: detect.c, and files.c. Referenced by LIBMTP_destroy_file_t(), LIBMTP_new_file_t(), LIBMTP_Send_Track_From_File_Descriptor(), LIBMTP_Send_Track_From_Handler(), and LIBMTP_Set_File_Name(). uint64_t LIBMTP_file_struct::filesize Size of file in bytes Examples: files.c. Referenced by LIBMTP_Send_File_From_File_Descriptor(), LIBMTP_Send_File_From_Handler(), LIBMTP_Send_Track_From_File_Descriptor(), and LIBMTP_Send_Track_From_Handler(). LIBMTP_filetype_t LIBMTP_file_struct::filetype Filetype used for the current file Examples: files.c. Referenced by LIBMTP_Send_Track_From_File_Descriptor(), LIBMTP_Send_Track_From_Handler(), LIBMTP_Set_File_Name(), and LIBMTP_Set_Object_Filename(). uint32_t LIBMTP_file_struct::item_id Unique item ID Examples: detect.c, and files.c. Referenced by LIBMTP_Send_File_From_File_Descriptor(), LIBMTP_Send_File_From_Handler(), LIBMTP_Send_Track_From_File_Descriptor(), LIBMTP_Send_Track_From_Handler(), and LIBMTP_Set_File_Name(). time_t LIBMTP_file_struct::modificationdate Date of last alteration of the file LIBMTP_file_t* LIBMTP_file_struct::next Next file in list or NULL if last file Examples: detect.c, and files.c. Referenced by LIBMTP_Get_Filelisting_With_Callback(), LIBMTP_Get_Files_And_Folders(), LIBMTP_Send_Track_From_File_Descriptor(), and LIBMTP_Send_Track_From_Handler(). uint32_t LIBMTP_file_struct::parent_id ID of parent folder Examples: files.c. Referenced by LIBMTP_Send_File_From_File_Descriptor(), LIBMTP_Send_File_From_Handler(), LIBMTP_Send_Track_From_File_Descriptor(), and LIBMTP_Send_Track_From_Handler(). uint32_t LIBMTP_file_struct::storage_id ID of storage holding this file Examples: files.c. Referenced by LIBMTP_Send_File_From_File_Descriptor(), LIBMTP_Send_File_From_Handler(), LIBMTP_Send_Track_From_File_Descriptor(), and LIBMTP_Send_Track_From_Handler(). Author Generated automatically by Doxygen for libmtp from the source code. Version 1.1.3 Sun Feb 17 2013 LIBMTP_file_struct(3)