vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.
2007-10-30T21:46:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 4.9 (MEDIUM)
AV:L/AC:L/Au:N/C:N/I:C/A:N
3.9
6.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 3.2.4 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Application | vobcopy | vobcopy | 0.5.14 | Yes |