Temporary File Creation Vulnerability in the Debian 'android-tools' Software Package

Release date:
Updated on:

Affected Systems:
Debian Android-tools
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56653

Android Tools is a lightweight integrated environment for Android Application Development. It is used to create, build, install, and test Android applications.

Android-tools 4.1.1 and other versions have security vulnerabilities when processing temporary files. Local attackers can use Symbolic Links to attack and obtain sensitive information.

<* Source: Christoph Biedl
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Debian
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.debian.org/security/