CVE-2008-4957

Published: 5 November 2008

find_flags in Kitware GCC-XML (gccxml) 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.cxx temporary file.

Notes

Author	Note
mdeslaur	not really an issue

Package	Release	Status
gccxml Launchpad, Ubuntu, Debian	dapper	Does not exist
	gutsy	Ignored (end of life, was needed)
	hardy	Ignored
	intrepid	Ignored
	jaunty	Ignored
	karmic	Ignored
	upstream	Ignored

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.