Skip to content
OpenAdvisories
Unscored DSA-1003-1 1 CVE

xpvm - insecure temporary file

Published Mar 16, 2006 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 xpvm 1.2.5-7.2woody1
Debian · 3.1 xpvm 1.2.5-7.3sarge1

Vulnerabilities 1

  • Unscored —

    xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user tem…