CVE-2015-0296

Published: Oct 6, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

FEDORA-2015-4332

vendor-advisory

x_refsource_FEDORA

72826

vdb-entry

x_refsource_BID

FEDORA-2015-4872

vendor-advisory

x_refsource_FEDORA

[oss-security] 20150227 CVE-2015-0296 preinstall scriptlet in texlive-base rpm of fedora allows unprivileged user to delete arbitrary files(maybe others)

mailing-list

x_refsource_MLIST

https://bugzilla.redhat.com/show_bug.cgi?id=1197082

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2015-0296

Description

Affected Products

References