REDHAT-BUG-812889: Low severity Munin qmailscan plug-in vulnerability

An insecure temporary file use flaw was found in the way qmailscan (plug-in to graph output from qmailscan and clamav) plug-in of the Munin, a network-wide graphing framework performed scan of qmailscan log files for presence of disallowed characters. A local attacker could use this flaw to conduct symbolic link attacks (possibly leading to attacker's ability to overwrite or remove arbitrary files, belonging to the user, running the Munin qmailscan log files scannning).

References: [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668778