Nessus Plugin #16383

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA679] DSA-679-1 toolchain-source

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2005 Michel Arboi

Summary:

DSA-679-1 toolchain-source

Version:

$Revision: 1.1 $

Cve_id:

CAN-2005-0159

Bugtraq_id:

-

Xrefs:

DSA:679

Description:

Sean Finney discovered several insecure temporary file uses in
toolchain-source, the GNU binutils and GCC source code and scripts.
These bugs can lead a local attacker with minimal knowledge to trick
the admin into overwriting arbitrary files via a symlink attack. The
problems exist inside the Debian-specific tpkg-* scripts.
For the stable distribution (woody) these problems have been fixed in
version 3.0.4-1woody1.
For the unstable distribution (sid) these problems have been fixed in
version 3.4-5.
We recommend that you upgrade your toolchain-source package.


Solution : http://www.debian.org/security/2005/dsa-679
Risk factor : High