tocsin

Debian/vobcopy: unknown

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.

Action: Upgrade vobcopy to 1.0.2-1 or later.

Affected

introducedfixedlast affected
01.0.2-1-

Fixed versions

1.0.2-1

Sources

published · modified · JSON