CVE-2009-1299

EPSS 0.02%

pulseaudio - insecure temporary directory

發布日:2010/3/18修改日:2026/3/9

也稱為:DSA-2017-1DEBIAN-CVE-2009-1299

描述

The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file.

受影響套件(2)

Debian/pulseaudiofrom 0, < 0.9.21-1.1
Debian/pulseaudiofrom 0, < 0.9.10-3+lenny2

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2009-1299