Total vulnerabilities in the database
Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.
| Software | From | Fixed in |
|---|---|---|
| tarantella / tarantella_enterprise | 3.3.10 | 3.3.10.x |
| tarantella / tarantella_enterprise | 3.3.11 | 3.3.11.x |
| tarantella / tarantella_enterprise | 3.3.20 | 3.3.20.x |
| tarantella / tarantella_enterprise | 3.3.0.1 | 3.3.0.1.x |
| tarantella / tarantella_enterprise | 3.3.0 | 3.3.0.x |