tocsin

Debian/pmount: unknown

The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/.

Action: Upgrade pmount to 0.9.23-1 or later.

Affected

introducedfixedlast affected
00.9.23-1-

Fixed versions

0.9.23-1

Sources

published · modified · JSON