Mandrake Linux Security Advisory : mm (MDKSA-2002:045)
Medium Nessus Plugin ID 13948
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionMarcus Meissner and Sebastian Krahmer discovered a temporary file vulnerability in the mm library which is used by the Apache webserver.
This vulnerability can be exploited to obtain root privilege if shell access to the apache user (typically apache or nobody) is already obtained.
SolutionUpdate the affected packages.