CVE-2008-4984

scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/dpkg.#####.tmp, (b) /tmp/missing_deps.#####, and (c)…

published November 6, 2008

CVSS
—
EPSS
0%
Percentile
23.5
In the wild
Unconfirmed
What it is

scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/dpkg.#####.tmp, (b) /tmp/missing_deps.#####, and (c) /tmp/sb2-pkg-chk.$tstamp.##### temporary files, related to the (1) dpkg-checkbuilddeps and (2) sb2-check-pkg-mappings scripts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.5th percentile
Published
2008-11-06T11:00Z
EPSS history
Timeline
  • 06 NOV 11:00Z
    scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/dpkg.#####.tmp, (b) /tmp/missing_deps.#####, and (c)…
    cvelistv5