Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary gunzip program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tarantella_enterprise | Tarantella | 3.3.0 (including) | 3.3.0 (including) |
| Tarantella_enterprise | Tarantella | 3.3.0.1 (including) | 3.3.0.1 (including) |
| Tarantella_enterprise | Tarantella | 3.3.10 (including) | 3.3.10 (including) |
| Tarantella_enterprise | Tarantella | 3.3.11 (including) | 3.3.11 (including) |
| Tarantella_enterprise | Tarantella | 3.3.20 (including) | 3.3.20 (including) |