The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
References
Link | Resource |
---|---|
http://www.debian.org/security/2005/dsa-679 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/12540 | Patch Vendor Advisory |
http://secunia.com/advisories/14277 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/19317 |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2005-04-26 21:00
Updated : 2017-07-10 18:32
NVD link : CVE-2005-0159
Mitre link : CVE-2005-0159
JSON object : View
CWE
Products Affected
debian
- debian_linux
- toolchain-source