tocsin

Debian/bash: unknown

bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, related to the (1) aliasconv.sh, (2) aliasconv.bash, and (3) cshtobash scripts.

Action: Upgrade bash to 4.0-2 or later.

Affected

introducedfixedlast affected
04.0-2-

Fixed versions

4.0-2

Sources

published · modified · JSON