Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 10/01/2004 Updated: 11/07/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

lintian 1.23 and previous versions removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian lintian 1.2_0.17.1

Jeroen van Wolffelaar discovered a problem in lintian, the Debian package checker The program removes the working directory even if it wasn't created at program start, removing an unrelated file or directory a malicious user inserted via a symlink attack For the stable distribution (woody) this problem has been fixed in version 120171 For the ...

NVD-CWE-Other http://www.debian.org/security/2004/dsa-630 http://secunia.com/advisories/13771 https://exchange.xforce.ibmcloud.com/vulnerabilities/18808 https://nvd.nist.gov https://www.debian.org/security/./dsa-630

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-1000

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect