• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

GNU Texinfo Insecure Temporary File Creation Vulnerability

Solution:
Please see the referenced advisories or more information.


Apple Mac OS X Server 10.3.9

• Apple SecUpdSrvr2007-005Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=13993&cat= 1&platform=osx&method=sa/SecUpdSrvr2007-005Pan.dmg

Apple Mac OS X 10.3.9

• Apple SecUpd2007-005Pan.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=13992&cat= 1&platform=osx&method=sa/SecUpd2007-005Pan.dmg

Apple Mac OS X Server 10.4.9

• Apple SecUpd2007-005Ti.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=13995&cat= 1&platform=osx&method=sa/SecUpd2007-005Ti.dmg


• Apple SecUpd2007-005Univ.dmg
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=13998&cat= 1&platform=osx&method=sa/SecUpd2007-005Univ.dmg

VMWare ESX Server 3.0.1

• VMWare esx-2559638-patch.html
  http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html

FreeBSD FreeBSD 4.11 -RELEASE-p3

• FreeBSD texindex5x.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:01/texindex5x.pat ch

FreeBSD FreeBSD 4.11 -STABLE

• FreeBSD texindex5x.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:01/texindex5x.pat ch

GNU Texinfo 4.7

• texinfo-i18n-no-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-no-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-doc-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-doc-4.7-56288U10_1 cl.i386.rpm


• Conectiva texinfo-i18n-cs-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-cs-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-da-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-da-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-de-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-de-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-de_AT-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-de_AT-4.7-562 88U10_1cl.i386.rpm


• Conectiva texinfo-i18n-eo-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-eo-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-fr-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:10/13/2005
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-fr-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-he-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-he-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-hr-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-hr-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-ja-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-ja-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-nb-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-nb-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-nl-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-nl-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-pl-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-pl-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-ro-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-ro-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-ru-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:10/13/2005
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-ru-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-sv-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-sv-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-tr-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-tr-4.7-56288U 10_1cl.i386.rpm


• Conectiva texinfo-i18n-zh_CN-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-zh_CN-4.7-562 88U10_1cl.i386.rpm


• Conectiva texinfo-i18n-zh_TW-4.7-56288U10_1cl.i386.rpm
  Conectiva 10:
  ftp://atualizacoes.conectiva.com.br/10/RPMS/texinfo-i18n-zh_TW-4.7-562 88U10_1cl.i386.rpm


• Debian info_4.7-2.2sarge2_alpha.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_alpha.deb


• Debian info_4.7-2.2sarge2_amd64.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_amd64.deb


• Debian info_4.7-2.2sarge2_arm.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_arm.deb


• Debian info_4.7-2.2sarge2_hppa.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_hppa.deb


• Debian info_4.7-2.2sarge2_i386.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_i386.deb


• Debian info_4.7-2.2sarge2_ia64.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_ia64.deb


• Debian info_4.7-2.2sarge2_m68k.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_m68k.deb


• Debian info_4.7-2.2sarge2_mips.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_mips.deb


• Debian info_4.7-2.2sarge2_powerpc.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_powerpc.deb


• Debian info_4.7-2.2sarge2_s390.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_s390.deb


• Debian info_4.7-2.2sarge2_sparc.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/info_4.7-2.2sar ge2_sparc.deb


• Debian texinfo_4.7-2.2sarge2_alpha.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_alpha.deb


• Debian texinfo_4.7-2.2sarge2_amd64.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_amd64.deb


• Debian texinfo_4.7-2.2sarge2_arm.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_arm.deb


• Debian texinfo_4.7-2.2sarge2_hppa.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_hppa.deb


• Debian texinfo_4.7-2.2sarge2_i386.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_i386.deb


• Debian texinfo_4.7-2.2sarge2_ia64.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_ia64.deb


• Debian texinfo_4.7-2.2sarge2_m68k.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_m68k.deb


• Debian texinfo_4.7-2.2sarge2_mips.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_mips.deb


• Debian texinfo_4.7-2.2sarge2_powerpc.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_powerpc.deb


• Debian texinfo_4.7-2.2sarge2_s390.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_s390.deb


• Debian texinfo_4.7-2.2sarge2_sparc.deb
  Debian 3.1 (stable)
  http://security.debian.org/pool/updates/main/t/texinfo/texinfo_4.7-2.2 sarge2_sparc.deb


• Trustix texinfo-4.7-2tr.i586.rpm
  Trustix Secure Linux 2.2
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix texinfo-4.8-5tr.i586.rpm
  Trustix Secure Linux
  ftp://ftp.trustix.org/pub/trustix/updates/


• Trustix texinfo-4.8-5tr.i586.rpm
  Trustix Secure Linux 3.0
  ftp://ftp.trustix.org/pub/trustix/updates/


• Ubuntu texinfo_4.7-2.2ubuntu1.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/texinfo/texinfo_4.7-2.2u buntu1.1_amd64.deb


• Ubuntu texinfo_4.7-2.2ubuntu1.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/texinfo/texinfo_4.7-2.2u buntu1.1_i386.deb


• Ubuntu texinfo_4.7-2.2ubuntu1.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/texinfo/texinfo_4.7-2.2u buntu1.1_powerpc.deb

FreeBSD FreeBSD 5.3

• FreeBSD texindex5x.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:01/texindex5x.pat ch

FreeBSD FreeBSD 5.3 -STABLE

• FreeBSD texindex5x.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:01/texindex5x.pat ch

FreeBSD FreeBSD 5.4 -RELENG

• FreeBSD texindex5x.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:01/texindex5x.pat ch

FreeBSD FreeBSD 6.0 -STABLE

• FreeBSD texindex.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:01/texindex.patch

FreeBSD FreeBSD 6.0 -RELEASE

• FreeBSD texindex.patch
  ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-06:01/texindex.patch