CVE-2004-1179

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/13633/Permissions Required
http://www.debian.org/security/2004/dsa-615Patch, Vendor Advisory
http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-12/0645.htmlBroken Link
http://www.securityfocus.com/bid/12078Patch, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/18646Third Party Advisory, VDB Entry
http://secunia.com/advisories/13633/Permissions Required
http://www.debian.org/security/2004/dsa-615Patch, Vendor Advisory
http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-12/0645.htmlBroken Link
http://www.securityfocus.com/bid/12078Patch, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/18646Third Party Advisory, VDB Entry

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-11805.0Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of s CVE-2004-11814.6htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files.CVE-2004-11827.5hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended ac CVE-2004-11835.1Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application cra CVE-2004-11844.6The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.CVE-2004-11857.5Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames CVE-2004-11865.0Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).CVE-2004-118710.0Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows CVE-2004-118810.0The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify t CVE-2004-11897.2The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does CVE-2004-11902.1SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read CVE-2004-11911.2Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow local users to read una