CVE ID:	CVE-2005-3011
Description:	The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Test IDs:	1.3.6.1.4.1.25623.1.0.55627   1.3.6.1.4.1.25623.1.0.55545   1.3.6.1.4.1.25623.1.0.55551   1.3.6.1.4.1.25623.1.0.56106   1.3.6.1.4.1.25623.1.0.57654   1.3.6.1.4.1.25623.1.0.55670   1.3.6.1.4.1.25623.1.0.55628   1.3.6.1.4.1.25623.1.0.55537
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3011 http://lists.apple.com/archives/security-announce/2007/May/msg00004.html BugTraq ID: 14854 http://www.securityfocus.com/bid/14854 Bugtraq: 20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates (Google Search) http://www.securityfocus.com/archive/1/464745/100/0/threaded Debian Security Information: DSA-1219 (Google Search) http://www.debian.org/security/2006/dsa-1219 FreeBSD Security Advisory: FreeBSD-SA-06:01 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:01.texindex.asc http://www.gentoo.org/security/en/glsa/glsa-200510-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:175 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328365 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10589 RedHat Security Advisories: RHSA-2006:0727 http://www.redhat.com/support/errata/RHSA-2006-0727.html http://securitytracker.com/id?1014992 http://securitytracker.com/id?1015468 http://secunia.com/advisories/16816 http://secunia.com/advisories/17070 http://secunia.com/advisories/17076 http://secunia.com/advisories/17093 http://secunia.com/advisories/17211 http://secunia.com/advisories/17215 http://secunia.com/advisories/18401 http://secunia.com/advisories/22929 http://secunia.com/advisories/23112 http://secunia.com/advisories/24788 http://secunia.com/advisories/25402 SGI Security Advisory: 20061101-01-P ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P SuSE Security Announcement: SUSE-SR:2005:023 (Google Search) http://www.novell.com/linux/security/advisories/2005_23_sr.html http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html http://www.ubuntu.com/usn/usn-194-1 http://www.vupen.com/english/advisories/2007/1267 http://www.vupen.com/english/advisories/2007/1939