CVE-2008-4950

Source
https://cve.org/CVERecord?id=CVE-2008-4950
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2008-4950.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2008-4950
Downstream
Published
2008-11-05T15:00:15Z
Modified
2026-04-10T03:40:15.370714Z
Summary
[none]
Details

gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments within a chroot.

Database specific
{
    "isDisputed": true
}
References

Affected packages