The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
Software | From | Fixed in |
---|---|---|
debian / debian_linux | 3.0 | 3.0.x |
debian / toolchain-source | 3.0.3-1 | 3.0.3-1.x |
debian / toolchain-source | 3.0.3-2 | 3.0.3-2.x |
debian / toolchain-source | 3.0.3-3 | 3.0.3-3.x |
debian / toolchain-source | 3.0.4 | 3.0.4.x |