jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/271020
• [oss-security] 20081015 CVE request: jhead mailing-list
• [oss-security] 20090206 Re: CVE request: jhead mailing-list
• [oss-security] 20081016 Re: CVE request: jhead mailing-list
• [oss-security] 20081015 Re: CVE request: jhead mailing-list