PT-2004-1018 · Debian · Debmake

Javier Fernández-Sanguino Peña · Published 2004-12-31 · Updated 2019-07-31 · CVE-2004-1179

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions debmake versions 3.6.x through 3.6.9 debmake versions 3.7.x through 3.7.6

Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary directories. Multiple vulnerabilities in the debmake package of the Debian GNU/Linux operating system can be exploited by a local attacker, potentially leading to a breach of protected information integrity.

Recommendations For debmake versions 3.6.x through 3.6.9, update to version 3.6.10 or later. For debmake versions 3.7.x through 3.7.6, update to version 3.7.7 or later.

Fix

Related Identifiers

BDU:2015-02955

CVE-2004-1179

DSA-615-1

Affected Products

Debmake

References · 12

• http://securityfocus.com/bid/12078 · Patch
• https://bdu.fstec.ru/vul/2015-02955 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1179 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-1179 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-1179 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-1179 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-1179 · Vendor Advisory
• http://debian.org/security/2004/dsa-615 · Vendor Advisory
• http://derkeiler.com/Mailing-Lists/Full-Disclosure/2004-12/0645.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18646 · Note
• http://debian.org/security/dsa-615 · Note
• http://secunia.com/advisories/13633 · Note