archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Link | Tags |
---|---|
https://security-tracker.debian.org/tracker/CVE-2006-4245 | third party advisory |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=385253 | patch third party advisory exploit |