p PatchFirst

CVE-2008-5367

CVE-2008-5367

This page contains facts from public vulnerability sources. Check the original advisory before updating.

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file.

EPSS 0.4%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • ppp Debian:12

    Versions
    • 2.4.9-1+1.1
    • 2.5.0-1+1
    • 2.5.0-1+2
    • 2.5.1-1+1
    • 2.5.1-1+1~exp1
    • 2.5.2-1+1
    • 2.5.2-1+1.1
    • 2.5.2-1+1.2
    • 2.5.2-1+1~exp1
    • 2.5.2-1+2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ppp Debian:13

    Versions
    • 2.5.2-1+1
    • 2.5.2-1+1.1
    • 2.5.2-1+1.2
    • 2.5.2-1+2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ppp Debian:14

    Versions
    • 2.5.2-1+1
    • 2.5.2-1+1.1
    • 2.5.2-1+1.2
    • 2.5.2-1+2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →