CVE-2007-0237 The ndeb-binary feature in Lookup (lookup-el) allows local users to overwrite arbitrary files via a symlink attack on temporary files.
MediumCVSS 4.6
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ndeb-binary feature in Lookup (lookup-el) allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lookup | All versions | No fix listed |
| debian/lookup-el(Debian:12) | < 1.4-5 | 1.4-5 |
| debian/lookup-el(Debian:13) | < 1.4-5 | 1.4-5 |
| debian/lookup-el(Debian:14) | < 1.4-5 | 1.4-5 |
References
- bugs.gentoo.org
- 34263 vdb-entry
- 24377 third-party-advisory vendor-advisory
- 24590 patch third-party-advisory vendor-advisory
- 28023 third-party-advisory
- GLSA-200712-07 vendor-advisory
- DSA-1269 patch vendor-advisory
- 23026 vdb-entry
- 1017792 vdb-entry
- lookup-ndebbinary-symlink(33052) vdb-entry
- Debian Security Tracker CVE-2007-0237 vendor-advisory