Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

git-core: privilege escalation

Package(s):

git-core

CVE #(s):

Created:

April 21, 2009

Updated:

April 22, 2009

Description:

From the Debian advisory: Peter Palfrader discovered that in the Git revision control system, on some architectures files under /usr/share/git-core/templates/ were owned by a non-root user. This allows a user with that uid on the local system to write to these files and possibly escalate their privileges.

Alerts:

Debian

DSA-1777-1

2009-04-21

(Log in to post comments)