CVE-2007-6209 Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
MediumCVSS 4.6
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zsh | = 4.3.4 | No fix listed |
| debian/zsh(Debian:12) | < 4.3.4-dev-3-2 | 4.3.4-dev-3-2 |
| debian/zsh(Debian:13) | < 4.3.4-dev-3-2 | 4.3.4-dev-3-2 |
| debian/zsh(Debian:14) | < 4.3.4-dev-3-2 | 4.3.4-dev-3-2 |
References
- 42481 vdb-entry
- 27899 third-party-advisory
- 26674 vdb-entry
- [zsh-workers] 20071202 difflog.pl and "security" mailing-list
- [zsh-workers] 20071203 Re: difflog.pl and "security" mailing-list
- [zsh-workers] 20071203 Re: difflog.pl and "security" mailing-list
- bugs.gentoo.org
- zsh-difflog-symlink(38812) vdb-entry
- Debian Security Tracker CVE-2007-6209 vendor-advisory
- bugs.debian.org issue-tracking