vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Debian_linux | Debian | 3.1 (including) | 3.1 (including) |
| Debian_linux | Debian | 3.1-r1 (including) | 3.1-r1 (including) |
| Debian_linux | Debian | 3.2.4 (including) | 3.2.4 (including) |
| Debian_linux | Debian | 4.0 (including) | 4.0 (including) |
| Vobcopy | Ubuntu | dapper | * |
| Vobcopy | Ubuntu | devel | * |
| Vobcopy | Ubuntu | edgy | * |
| Vobcopy | Ubuntu | feisty | * |
| Vobcopy | Ubuntu | gutsy | * |
| Vobcopy | Ubuntu | hardy | * |
| Vobcopy | Ubuntu | intrepid | * |
| Vobcopy | Ubuntu | jaunty | * |
| Vobcopy | Ubuntu | karmic | * |