Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freebsd | Freebsd | 4.0 (including) | 4.0 (including) |
| Freebsd | Freebsd | 4.0-alpha (including) | 4.0-alpha (including) |
| Freebsd | Freebsd | 4.0-releng (including) | 4.0-releng (including) |
| Freebsd | Freebsd | 4.1 (including) | 4.1 (including) |
| Freebsd | Freebsd | 4.1.1 (including) | 4.1.1 (including) |
| Freebsd | Freebsd | 4.1.1-release (including) | 4.1.1-release (including) |
| Freebsd | Freebsd | 4.1.1-stable (including) | 4.1.1-stable (including) |
| Freebsd | Freebsd | 4.2 (including) | 4.2 (including) |
| Freebsd | Freebsd | 4.2-stable (including) | 4.2-stable (including) |
| Freebsd | Freebsd | 4.3 (including) | 4.3 (including) |
| Freebsd | Freebsd | 4.3-release (including) | 4.3-release (including) |
| Freebsd | Freebsd | 4.3-release_p38 (including) | 4.3-release_p38 (including) |
| Freebsd | Freebsd | 4.3-releng (including) | 4.3-releng (including) |
| Freebsd | Freebsd | 4.3-stable (including) | 4.3-stable (including) |
| Freebsd | Freebsd | 4.4 (including) | 4.4 (including) |
| Freebsd | Freebsd | 4.4-release_p42 (including) | 4.4-release_p42 (including) |
| Freebsd | Freebsd | 4.4-releng (including) | 4.4-releng (including) |
| Freebsd | Freebsd | 4.4-stable (including) | 4.4-stable (including) |
| Freebsd | Freebsd | 4.5 (including) | 4.5 (including) |
| Freebsd | Freebsd | 4.5-release (including) | 4.5-release (including) |
| Freebsd | Freebsd | 4.5-release_p32 (including) | 4.5-release_p32 (including) |
| Freebsd | Freebsd | 4.5-releng (including) | 4.5-releng (including) |
| Freebsd | Freebsd | 4.5-stable (including) | 4.5-stable (including) |
| Freebsd | Freebsd | 4.6 (including) | 4.6 (including) |
| Freebsd | Freebsd | 4.6-release (including) | 4.6-release (including) |
| Freebsd | Freebsd | 4.6-release_p20 (including) | 4.6-release_p20 (including) |
| Freebsd | Freebsd | 4.6-releng (including) | 4.6-releng (including) |
| Freebsd | Freebsd | 4.6-stable (including) | 4.6-stable (including) |
| Freebsd | Freebsd | 4.6.2 (including) | 4.6.2 (including) |
| Freebsd | Freebsd | 4.7 (including) | 4.7 (including) |
| Freebsd | Freebsd | 4.7-release (including) | 4.7-release (including) |
| Freebsd | Freebsd | 4.7-release_p17 (including) | 4.7-release_p17 (including) |
| Freebsd | Freebsd | 4.7-releng (including) | 4.7-releng (including) |
| Freebsd | Freebsd | 4.7-stable (including) | 4.7-stable (including) |
| Freebsd | Freebsd | 4.8 (including) | 4.8 (including) |
| Freebsd | Freebsd | 4.8-pre-release (including) | 4.8-pre-release (including) |
| Freebsd | Freebsd | 4.8-release_p6 (including) | 4.8-release_p6 (including) |
| Freebsd | Freebsd | 4.8-releng (including) | 4.8-releng (including) |
| Freebsd | Freebsd | 4.9 (including) | 4.9 (including) |
| Freebsd | Freebsd | 4.9-pre-release (including) | 4.9-pre-release (including) |
| Freebsd | Freebsd | 4.9-releng (including) | 4.9-releng (including) |
| Freebsd | Freebsd | 4.10 (including) | 4.10 (including) |
| Freebsd | Freebsd | 4.10-release (including) | 4.10-release (including) |
| Freebsd | Freebsd | 4.10-releng (including) | 4.10-releng (including) |
| Freebsd | Freebsd | 4.11-stable (including) | 4.11-stable (including) |
| Freebsd | Freebsd | 5.0 (including) | 5.0 (including) |
| Freebsd | Freebsd | 5.0-alpha (including) | 5.0-alpha (including) |
| Freebsd | Freebsd | 5.0-release_p14 (including) | 5.0-release_p14 (including) |
| Freebsd | Freebsd | 5.0-releng (including) | 5.0-releng (including) |
| Freebsd | Freebsd | 5.1 (including) | 5.1 (including) |
| Freebsd | Freebsd | 5.1-alpha (including) | 5.1-alpha (including) |
| Freebsd | Freebsd | 5.1-release (including) | 5.1-release (including) |
| Freebsd | Freebsd | 5.1-release_p5 (including) | 5.1-release_p5 (including) |
| Freebsd | Freebsd | 5.1-releng (including) | 5.1-releng (including) |
| Freebsd | Freebsd | 5.2 (including) | 5.2 (including) |
| Freebsd | Freebsd | 5.2.1-release (including) | 5.2.1-release (including) |
| Freebsd | Freebsd | 5.2.1-releng (including) | 5.2.1-releng (including) |
| Freebsd | Freebsd | 5.3 (including) | 5.3 (including) |
| Freebsd | Freebsd | 5.3-release (including) | 5.3-release (including) |
| Freebsd | Freebsd | 5.3-releng (including) | 5.3-releng (including) |
| Freebsd | Freebsd | 5.3-stable (including) | 5.3-stable (including) |
| Freebsd | Freebsd | 5.4-pre-release (including) | 5.4-pre-release (including) |
| Freebsd | Freebsd | 5.4-release (including) | 5.4-release (including) |