sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Cvsup-mirror | Cvsup | 1.2 (including) | 1.2 (including) |
| Sup | Sup | 1.8 (including) | 1.8 (including) |
References