Vulnerabilities (CVE)

Filtered by vendor Freedesktop Subscribe
Filtered by product Scratchbox2
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-4984 1 Freedesktop 1 Scratchbox2 2023-12-10 6.9 MEDIUM N/A
scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/dpkg.#####.tmp, (b) /tmp/missing_deps.#####, and (c) /tmp/sb2-pkg-chk.$tstamp.##### temporary files, related to the (1) dpkg-checkbuilddeps and (2) sb2-check-pkg-mappings scripts.