Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

dpkg: symlink attack

Package(s):

dpkg

CVE #(s):

CVE-2011-0402

Created:

January 24, 2011

Updated:

January 26, 2011

Description:

From the CVE entry:

dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory.

Alerts:

Fedora	FEDORA-2011-0362	2011-01-13
Fedora	FEDORA-2011-0345	2011-01-13

(Log in to post comments)