qgit: arbitrary code execution [LWN.net]

Package(s):

qgit

CVE #(s):

CVE-2007-4631

Created:

September 10, 2007

Updated:

October 8, 2007

Description:

Not only does QGit construct a predictable file name here, and doesn't check if the files already exist, which can be leveraged into information leak or arbitrary file overwrite in case they're symlinks, but later on executes one of them. This is not just problem when /tmp is mounted with noexec option, but might be exploited into arbitrary code execution under time-dependent race condition.

Alerts:

Gentoo	200710-05	2007-10-07
Fedora	FEDORA-2007-2108	2007-09-10

(Log in to post comments)