Debian/merkaartor: unknown

Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file.

Action: Upgrade merkaartor to 0.14+svnfixes~20090912-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2009-4193
• https://security-tracker.debian.org/tracker/CVE-2009-4193

published 2009-12-03T19:30:00.360Z · modified 2026-10-23T17:47:23.360069700Z · JSON