EUVD-2008-1901

Malware in sbrugna...

EUVD-2008-1902

Malware in sbrugna...

CVE-2008-1901

aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file...

CVE-2008-1902

The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL...

CVE-2008-1901

aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file...

CVE-2008-1902

The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL...

Arbitrary file deletion

aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file...

CVE-2008-1902

The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL...

CVE-2008-1901

aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file...

CVE-2008-1902

The CVE concerns the GUI for aptlinex prior to version 0.91, where insufficient user warning for potentially dangerous actions could let an attacker remove or modify packages via an apt:// URL. Affected component: aptlinex GUI; Root cause: inadequate confirmation/notification of dangerous actions...

CVE-2008-1901

CVE-2008-1901 affects aptlinex before 0.91, where a local user can overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file. The issue arises from a symlink-based race in handling the lock file, enabling local privilege impact with complete confidentiality, integrity, ...