CVE-2005-3340

Name of the Vulnerable Software and Affected Versions Tux Paint versions 0.9.14 and earlier

Description The issue concerns multiple vulnerabilities in the tuxpaint-data package of the Debian GNU/Linux operating system, which can lead to breaches of confidentiality, integrity, and availability of protected information. A local attacker can exploit these vulnerabilities. Additionally, the tuxpaint-import.sh script in Tux Paint creates temporary files insecurely.

Recommendations For Tux Paint versions 0.9.14 and earlier, consider restricting access to the tuxpaint-import.sh script until a secure version is available. As a temporary workaround, consider disabling the creation of temporary files by the tuxpaint-import.sh script to minimize the risk of exploitation.