Lucene search
MitreCVE-2004-1000HistoryJan 19, 2005 - 5:00 a.m.
CVE-2004-1000
2005-01-1905:00:00
mitre
web.nvd.nist.gov
39
lintian
working directory
deletion
arbitrary files
symlink attack
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
5.1%
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.
Affected configurations
Node
debianlintianMatch1.2_0.17.1
Related
debian
debian
[SECURITY] [DSA 630-1] New lintian packages fix insecure temporary directory
2005-01-10 09:17:43
[SECURITY] [DSA 630-1] New lintian packages fix insecure temporary directory
2005-01-10 09:17:43
openvas
openvas
Debian: Security Advisory (DSA-630-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 630-1 (lintian)
2008-01-17 00:00:00
nvd
nvd
CVE-2004-1000
2004-01-10 05:00:00
nessus
nessus
Debian DSA-630-1 : lintian - insecure temporary directory
2005-01-12 00:00:00
ubuntucve
ubuntucve
CVE-2004-1000
2004-01-10 00:00:00
osv
osv
lintian - insecure temporary directory
2005-01-10 00:00:00
debiancve
debiancve
CVE-2004-1000
2005-01-19 05:00:00
cvelist
cvelist
CVE-2004-1000
2005-01-19 05:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2004-1000