FreeBSD : heartbeat -- insecure temporary file creation vulnerability (f6447303-9ec9-11da-b410-000e0c2e438a)
Low Nessus Plugin ID 21538
SynopsisThe remote FreeBSD host is missing a security-related update.
DescriptionEric Romang reports a temporary file creation vulnerability within heartbeat. The vulnerability is caused by hard-coded temporary file usage. This can cause an attacker to create an arbitrary symlink causing the application to overwrite the symlinked file with the permissions of the user executing the application.
SolutionUpdate the affected package.