CVE-2003-0606 sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
MediumCVSS 4.6
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cvsup-mirror | = 1.2 | No fix listed |
| sup | = 1.8 | No fix listed |
| debian/sup(Debian:12) | < 1.8-9 | 1.8-9 |
| debian/sup(Debian:13) | < 1.8-9 | 1.8-9 |
| debian/sup(Debian:14) | < 1.8-9 | 1.8-9 |
References
- DSA-353 patch vendor-advisory
- Debian Security Tracker CVE-2003-0606 vendor-advisory