Bug#530630: excellent-bifurcation: Creates file in current working directory

Guillem Jover guillem at debian.org
Tue May 26 13:31:53 UTC 2009


Package: excellent-bifurcation
Version: 0.0.20071015-1
Severity: important
Tags: security

Hi,

This game creates the file init.txt on the current working dir after
setting the key controls. It should probably create it under a dot dir
on the home dir (preferably following the XDG base dir spec). Setting
as important as this might be a security problem, allowing for a symlink
attack on certain conditions.

regards,
guillem





More information about the Pkg-games-devel mailing list