CVE-2005-0159

The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:debian:toolchain-source:3.0.3-1:*:*:*:*:*:*:*
cpe:2.3:a:debian:toolchain-source:3.0.3-2:*:*:*:*:*:*:*
cpe:2.3:a:debian:toolchain-source:3.0.3-3:*:*:*:*:*:*:*
cpe:2.3:a:debian:toolchain-source:3.0.4:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*

History

20 Nov 2024, 23:54

Type Values Removed Values Added
References () http://secunia.com/advisories/14277 - () http://secunia.com/advisories/14277 -
References () http://www.debian.org/security/2005/dsa-679 - Patch, Vendor Advisory () http://www.debian.org/security/2005/dsa-679 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/12540 - Patch, Vendor Advisory () http://www.securityfocus.com/bid/12540 - Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/19317 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/19317 -

Information

Published : 2005-04-27 04:00

Updated : 2024-11-20 23:54


NVD link : CVE-2005-0159

Mitre link : CVE-2005-0159

CVE.ORG link : CVE-2005-0159


JSON object : View

Products Affected

debian

  • toolchain-source
  • debian_linux