The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Debmake |
Debian |
3.6 |
* |
Debmake |
Debian |
3.7 |
* |
References