CVE-2007-5839

The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command.

Date published : 2007-11-06

http://www.securityfocus.com/bid/26326

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449149