1
Candidate: CVE-2008-4950
4
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4950
6
** DISPUTED ** gccross in dpkg-cross 2.3.0 allows local users to overwrite
7
arbitrary files via a symlink attack on the tmp/gccross2.log temporary
8
file. NOTE: the vendor disputes this vulnerability, stating that "There is
9
no sense in this bug - the script ... is called under specific
10
cross-building environments within a chroot."
13
mdeslaur> this is disputed, let's ignore
20
upstream_dpkg-cross: ignored
21
dapper_dpkg-cross: ignored (reached end-of-life)
22
gutsy_dpkg-cross: needed (reached end-of-life)
23
hardy_dpkg-cross: ignored
24
intrepid_dpkg-cross: ignored
25
jaunty_dpkg-cross: ignored
26
karmic_dpkg-cross: ignored
27
devel_dpkg-cross: ignored