Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 386341 - app-arch/dpkg: symlink vulnerability (CVE-2011-0402)
Summary: app-arch/dpkg: symlink vulnerability (CVE-2011-0402)
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL:
Whiteboard: B3 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2011-10-08 14:46 UTC by GLSAMaker/CVETool Bot
Modified: 2014-06-15 00:11 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2011-10-08 14:46:23 UTC 
CVE-2011-0402 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0402):
  dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote
  attackers to modify arbitrary files via a symlink attack on unspecified
  files in the .pc directory.
Comment 1 Stefan Behte (RETIRED) gentoo-dev Security 2011-10-08 14:48:57 UTC 
GLSA together with 309633.
Comment 2 Chris Reffett (RETIRED) gentoo-dev Security 2014-06-15 00:11:07 UTC 
Old. No GLSA.