Description
A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
Affected products
- mandrakesoft / mandrake_linux6.0 – 6.0
- mandrakesoft / mandrake_linux6.1 – 6.1
- mandrakesoft / mandrake_linux7.0 – 7.0
- mandrakesoft / mandrake_linux7.1 – 7.1