CVE-2008-2958 | BDVDB-2026-31312 Detail

Description#

Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have other impacts via symlink and possibly other attacks on temporary working directories.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/30873
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=488140
http://lists.alioth.debian.org/pipermail/secure-testing-team/2008-June/001672.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/43440

Exploit#

No public exploit known

History#

Version 12008-07-01Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.