tocsin

Debian/libcgi-session-perl: unknown

CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1) Driver::File, (2) Driver::db_file, and possibly (3) Driver::sqlite.

Action: Upgrade libcgi-session-perl to 4.11-1 or later.

Affected

introducedfixedlast affected
04.11-1-

Fixed versions

4.11-1

Sources

published · modified · JSON