Description
uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to overwrite arbitrary files via a symlink attack on a temporary filename generated by the tempnam function. NOTE: this may be a CVE-2004-2265 regression.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | uudeview | 0.5.20-3.1 | — |
| Debian 13 | uudeview | 0.5.20-3.1 | — |
| Debian 12 | uudeview | 0.5.20-3.1 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | uudeview | 0.5.20-257.9 | openSUSE-SU-2024:10292-1 |
Advisories 1
- openSUSE-SU-2024:10292-1 uudeview-0.5.20-257.9 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- GLSA-200808-11 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480972
- 31420 third-party-advisory
- 30171 third-party-advisory
- [oss-security] 20080514 Re: CVE id request: uudeview mailing-list
- 29211 vdb-entry
- uudeview-tempnam-symlink(42407) vdb-entry
- [oss-security] 20080530 Re: CVE id request: uudeview mailing-list