CVE-2008-4950

gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file

published November 5, 2008

CVSS
—
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments within a chroot.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.5th percentile
Published
2008-11-05T14:51Z
EPSS history
Timeline
  • 05 NOV 14:51Z
    gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file
    cvelistv5