CVE-2014-7206

Related Files

Debian Security Advisory 3048-1

Posted Oct 9, 2014

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3048-1 - Guillem Jover discovered that the changelog retrieval functionality in apt-get used temporary files in an insecure way, allowing a local user to cause arbitrary files to be overwritten.

tags | advisory, arbitrary, local

systems | linux, debian

advisories | CVE-2014-7206

SHA-256 | e560fbde31ef78372c5c58e5fb97d1b738f7c6c631ba5bb62b24ae1c4645919c

Download | Favorite | View

Ubuntu Security Notice USN-2370-1

Posted Oct 8, 2014

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2370-1 - Guillem Jover discovered that APT incorrectly created a temporary file when handling the changelog command. A local attacker could use this issue to overwrite arbitrary files. In the default installation of Ubuntu, this should be prevented by the kernel link restrictions.

tags | advisory, arbitrary, kernel, local

systems | linux, ubuntu

advisories | CVE-2014-7206

SHA-256 | f68baf3af6020849786748719a5425dd99fe459dd9f7340d1ac69932e7170a3e

Download | Favorite | View