CVE-2008-2958 Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have other impacts via symlink and possibly other attacks on temporary working directo...
MediumCVSS 4.4
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have other impacts via symlink and possibly other attacks on temporary working directories.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkinstall | = 1.6.1 | No fix listed |
| debian/checkinstall(Debian:12) | < 1.6.1-7 | 1.6.1-7 |
| debian/checkinstall(Debian:13) | < 1.6.1-7 | 1.6.1-7 |
| debian/checkinstall(Debian:14) | < 1.6.1-7 | 1.6.1-7 |
References
- bugs.debian.org
- lists.alioth.debian.org exploit
- 30873 third-party-advisory vendor-advisory
- checkinstall-multiple-symlink(43440) vdb-entry
- Debian Security Tracker CVE-2008-2958 vendor-advisory
- bugs.debian.org issue-tracking