Skip to content
OpenAdvisories
Unscored DSA-366 1 CVE

eroaster - insecure temporary file

Published Aug 5, 2003 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 eroaster 2.1.0.0.3-2woody1

Vulnerabilities 1

  • Unscored —

    eroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file that is …