CVE-2005-0159 The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
MediumCVSS 4.6
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian toolchain-source | = 3.0.3-1 | No fix listed |
| debian toolchain-source | = 3.0.3-2 | No fix listed |
| debian toolchain-source | = 3.0.3-3 | No fix listed |
| debian toolchain-source | = 3.0.4 | No fix listed |
| debian linux | = 3.0 | No fix listed |
References
- 14277 third-party-advisory
- DSA-679 patch vendor-advisory
- 12540 patch vdb-entry vendor-advisory
- toolchain-source-symlink(19317) vdb-entry