CAN-2005-0159

CVE-2005-0159 affects the Debian toolchain-source package (tpkg-* scripts) where insecure temporary file usage allows a local attacker to overwrite arbitrary files via a symlink attack. The Debian security advisories (DSA-679-1) document that the fix is available in toolchain-source versions 3.0....

Debian Security Advisory DSA 679-1 (toolchain-source)

The remote host is missing an update to toolchain-source announced via advisory DSA 679-1. OpenVAS Vulnerability Test $Id: deb6791.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 679-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2005-0159

The tpkg- scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-0159

CVE-2005-0159 concerns insecure temporary file handling in the Debian-specific tpkg-* scripts within toolchain-source (version 3.0.4 in Woody; later fixes in 3.4-5 for sid). A local attacker could exploit symlink tricks to overwrite arbitrary files via insecure temporary files, enabling local pri...

CVE-2005-0159

The tpkg- scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files...