Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

gcc: file overwrite vulnerability

Package(s):

gcc

CVE #(s):

CVE-2006-3619

Created:

September 6, 2006

Updated:

March 14, 2008

Description:

The fastjar utility found in the GNU compiler collection does not perform adequate file path checking, allowing the creation or overwriting of files outside of the current directory tree.

Alerts:

Mandriva	MDVSA-2008:066	2007-03-13
Red Hat	RHSA-2007:0473-01	2007-06-11
Red Hat	RHSA-2007:0220-02	2007-05-01
Debian	DSA-1170-1	2006-09-06

(Log in to post comments)