Security Advisories (1)
CVE-2014-5260 (2014-08-16)

The (1) mkxmltype and (2) mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_xml_##### temporary file.

NAME

mkxmltype - Make XML analysis using XML::DT

SYNOPSIS

mkxmltype <xmlfile>

DESCRIPTION

This command tries to infer DTD and Camlila-like types for a specific XML file;

Options

-latin1             input file encoding is forced to be latin1
-html               uses html (libxml2) parser
-show_att           Show attribute values
-expand_att_id
-lines=20000        just reads the first 20000 lines of the XML file
-t
-shell              Enter interactive shell mode

SEE ALSO

XML::DT(1), mkdtskel(1), mkdtdskel and perl(1)