FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time.
Product
debian/fdclone vulnerabilities
2 published CVES affecting debian/fdclone, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 1
- Unscored
- 1
- CISA KEV
- 0
Latest debian/fdclone CVEs
Newest publication first
-
LowCVSS 3.6
-
Unknown
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.