CVE-2009-1299

EPSS 0.02%

pulseaudio - insecure temporary directory

Published: 3/18/2010Modified: 3/9/2026

Also known as:DSA-2017-1DEBIAN-CVE-2009-1299

Description

The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file.

Affected packages (2)

Debian/pulseaudiofrom 0, < 0.9.21-1.1
Debian/pulseaudiofrom 0, < 0.9.10-3+lenny2

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2009-1299