CVE-2004-0770 romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of (1) gzip or (2) bzip ROM files.
LowCVSS 2.1
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of (1) gzip or (2) bzip ROM files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dgen emulator | = 1.15 | No fix listed |
| dgen emulator | = 1.16 | No fix listed |
| dgen emulator | = 1.17 | No fix listed |
| dgen emulator | = 1.18 | No fix listed |
| dgen emulator | = 1.20 | No fix listed |
| dgen emulator | = 1.20_a | No fix listed |
| dgen emulator | = 1.21 | No fix listed |
| dgen emulator | = 1.22 | No fix listed |
| dgen emulator | = 1.23 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| debian/dgen(Debian:12) | < 1.23-6 | 1.23-6 |
| debian/dgen(Debian:12) | = 1.23-1 | No fix listed |
References
- bugs.debian.org
- 12214 third-party-advisory
- 10855 vdb-entry vendor-advisory
- dgen-rom-decompression-symlink(16884) vdb-entry
- Debian Security Tracker CVE-2004-0770 vendor-advisory