Untriaged
The git-changelog utility in git-extras 1.7.0 allows local users to …
The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or (2) /tmp/.git-effort.
References
- http://www.openwall.com/lists/oss-security/2013/01/22/8 x_refsource_MISC
- http://www.openwall.com/lists/oss-security/2013/01/23/5 x_refsource_MISC
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698490 x_refsource_MISC
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698490 x_transferred x_refsource_MISC
- http://www.openwall.com/lists/oss-security/2013/01/22/8 x_transferred x_refsource_MISC
- http://www.openwall.com/lists/oss-security/2013/01/23/5 x_transferred x_refsource_MISC
- http://www.openwall.com/lists/oss-security/2013/01/22/8 x_refsource_MISC
- http://www.openwall.com/lists/oss-security/2013/01/23/5 x_refsource_MISC
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698490 x_refsource_MISC
- http://www.openwall.com/lists/oss-security/2013/01/22/8 x_transferred x_refsource_MISC
- http://www.openwall.com/lists/oss-security/2013/01/23/5 x_transferred x_refsource_MISC
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698490 x_transferred x_refsource_MISC
Affected products
git-extras
- ==1.7.0
Package maintainers
-
@SuperSandro2000 Sandro Jäckel <sandro.jaeckel@gmail.com>