A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mandrake_linux | Mandrakesoft | 6.0 (including) | 6.0 (including) |
| Mandrake_linux | Mandrakesoft | 6.1 (including) | 6.1 (including) |
| Mandrake_linux | Mandrakesoft | 7.0 (including) | 7.0 (including) |
| Mandrake_linux | Mandrakesoft | 7.1 (including) | 7.1 (including) |