CVE

Id
9428  
CVE No.
CVE-2004-1000  
Status
Candidate  
Description
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.  
Phase
Assigned (20041102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63146 9428 CVE-2004-1000 DEBIAN:DSA-630  View
63147 9428 CVE-2004-1000 URL:http://www.debian.org/security/2004/dsa-630  View
63148 9428 CVE-2004-1000 SECUNIA:13771  View
63149 9428 CVE-2004-1000 URL:http://secunia.com/advisories/13771  View
63150 9428 CVE-2004-1000 XF:lintian-symlink(18808)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63124 JVNDB-2004-000466 Shadow の passwd_check() 関数におけるセキュリティ制限を回避される脆弱性 Shadow には、pwdcheck.c の passwd_check() 関数において、pam_chauthtok() 関数が返すエラーの処理が不適切であるため、セキュリティ制限を回避される脆弱性が存在します。 CVE-2004-1001 9428 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000466.html  View