Description
vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the (1) /tmp/vobcopy.bla or (2) /tmp/vobcopy_0.5.14.log temporary file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | vobcopy | 1.0.2-1 | — |
| Debian 13 | vobcopy | 1.0.2-1 | — |
| Debian 12 | vobcopy | 1.0.2-1 | — |
References
- GLSA-200803-11 vendor-advisory
- 29259 third-party-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448319
- 26233 vdb-entry
- 41997 vdb-entry
- 27420 third-party-advisory
- vobcopy-vobcopybla-symlink(38172) vdb-entry