Your submission was sent successfully! Close

CVE-2008-5135

Published: 18 November 2008

** DISPUTED ** os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounted-map or (2) /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-root users."

Priority

Negligible

Status

Package Release Status
os-prober
Launchpad, Ubuntu, Debian
dapper Ignored
(reached end-of-life)
gutsy Needed
(reached end-of-life)
hardy Ignored

intrepid Ignored

jaunty Ignored

karmic Ignored

lucid Ignored

upstream Needs triage

Notes

AuthorNote
mdeslaur
upstream disputes this, let's ignore

References