CVE-2004-1179 The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories.
LowCVSS 2.1
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian debmake | >= 3.6, < 3.6.10 | 3.6.10 |
| debian debmake | >= 3.7, < 3.7.7 | 3.7.7 |
| debian debmake(Debian:12) | < 3.7.7 | 3.7.7 |
| debian debmake(Debian:13) | < 3.7.7 | 3.7.7 |
| debian debmake(Debian:14) | < 3.7.7 | 3.7.7 |
References
- 13633 permissions-required third-party-advisory
- DSA-615 patch vendor-advisory
- 20041223 [USN-49-1] debmake vulnerability broken-link mailing-list
- 12078 patch third-party-advisory vdb-entry
- debmake-debstd-symlink(18646) third-party-advisory vdb-entry
- Debian Security Tracker CVE-2004-1179 vendor-advisory