QwikSec

Security Database

CVE

CWE

Training

CVE-2004-2768

Published: Jun 8, 2010

Modified: Aug 8, 2024

PUBLISHED

Description

dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid file, (2) setgid file, or (3) device, a related issue to CVE-2010-2059.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

dpkg-setgid-privilege-escalation(59428)

vdb-entry

x_refsource_XF

http://www.hackinglinuxexposed.com/articles/20031214.html

x_refsource_MISC

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=225692

x_refsource_CONFIRM

[isn] 20031215 The mysteriously persistently exploitable program explained.

mailing-list

x_refsource_MLIST

https://bugzilla.redhat.com/show_bug.cgi?id=598775

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.