Bug#576869: kraptor: Creates files in current working directory

Guillem Jover guillem at debian.org
Wed Apr 7 21:05:04 UTC 2010


Package: kraptor
Version: 0.0.20040403-6
Severity: important

Hi,

This game creates files named krapNN.ksv (where NN are two digits) on
the current working dir every time the user saves a game. It should
create them under a dot dir on the home dir (preferably following the
XDG base dir spec), mostly so that the user can always load previous
sessions regardless of the current working dir. Setting as important as
this might be a security problem, allowing for a symlink attack on
certain conditions.

regards,
guillem





More information about the Pkg-games-devel mailing list