PT-2004-1018 · Debian · Debmake

Javier Fernández-Sanguino Peña · Publicado 2004-12-31 · Atualizado 2019-07-31 · CVE-2004-1179

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions debmake versions 3.6.x through 3.6.9 debmake versions 3.7.x through 3.7.6

Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary directories. Multiple vulnerabilities in the debmake package of the Debian GNU/Linux operating system can be exploited by a local attacker, potentially leading to a breach of protected information integrity.

Recommendations For debmake versions 3.6.x through 3.6.9, update to version 3.6.10 or later. For debmake versions 3.7.x through 3.7.6, update to version 3.7.7 or later.

Correção

Identificadores relacionados

BDU:2015-02955

CVE-2004-1179

DSA-615-1

Produtos afetados

Debmake

Referências · 12

• http://derkeiler.com/Mailing-Lists/Full-Disclosure/2004-12/0645.html · Nota
• http://securityfocus.com/bid/12078 · Correção
• https://bdu.fstec.ru/vul/2015-02955 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1179 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2004-1179 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-1179 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2004-1179 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18646 · Nota
• http://debian.org/security/dsa-615 · Nota
• https://security-tracker.debian.org/tracker/CVE-2004-1179 · Aviso do Fabricante
• http://debian.org/security/2004/dsa-615 · Aviso do Fabricante
• http://secunia.com/advisories/13633 · Nota