StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/5487http://archives.neohapsis.com/archives/bugtraq/2000-11/0115.htmlhttp://www.securityfocus.com/bid/1922
