Debian/lazarus: unknown
create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a (1) /tmp/lazarus.tgz temporary file or a (2) /tmp/lazarus temporary d
Action: Upgrade lazarus to 0.9.24-0-11 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.24-0-11 | - |
Fixed versions
| 0.9.24-0-11 |
Sources
- osv: DEBIAN-CVE-2008-5007#Debian:13/lazarus
- https://security-tracker.debian.org/tracker/CVE-2008-5007
published · modified · JSON