CVEvulnerability

CVE-2014-1638

3.3 LOW Published 2014-01-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-01-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.3 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:P
Weaknesses
CWE-59

Description

(1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename.

Affected configurations

• debian localepurge (<= 0.7.3.1)

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References