XML Security Library "xslt. c" Arbitrary File Access Vulnerability

Release date:
Updated on:

Affected Systems:
Debian Linux 5.0 x
MandrakeSoft Linux Mandrake 2010.0 x86_64
MandrakeSoft Linux Mandrake 2009.0 x86-64
MandrakeSoft Linux Mandrake 2009.0
MandrakeSoft Linux Mandrake 10.0
Aleksey Sanin XML Security Library 1.2.16
Unaffected system:
Aleksey Sanin XML Security Library 1.2.17
Description:
--------------------------------------------------------------------------------
Bugtraq id: 47135
Cve id: CVE-2011-1425

XML Security Library is a C Library developed based on LibXML2 to process XML Security standards.

XML Security Library "xslt. c" has the Arbitrary File Access Vulnerability. Remote attackers can exploit this vulnerability to read or write arbitrary XML files.

<**>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

MandrakeSoft
------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.linux-mandrake.com/en/security/