Lucene search
+L
FreedesktopScratchbox2

1 matches found

CVE
CVE
added 2008/11/06 11:0 a.m.56 views

CVE-2008-4984

The CVE-2008-4984 issue affects scratchbox2 version 1.99.0.24, where local users can overwrite arbitrary files via a symlink attack on temporary files (e.g., /tmp/dpkg.#####.tmp, /tmp/missing_deps.#####, /tmp/sb2-pkg-chk.$tstamp.#####) related to the dpkg-checkbuilddeps and sb2-check-pkg-mappings...

6.9CVSS6.4AI score0.00318EPSS
Save