Approved changes feed: RSS · Atom

cpe:2.3:a:debian:dpkg-cross:2.3.0:*:*:*:*:*:*:*

part: a version: 2.3.0 update: *

VendorDebian (4199fb5b-36f6-5ceb-83d5-855460345e36)
ProductDpkg Cross (f8d004d0-6e3a-510b-b567-0f4beea1738d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4950 vulnerable 2026-06-08 04:50:48.707147 Details available
gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments within a chroot.
Published: 2008-11-05T14:51:00.000Z
Updated: 2024-09-17T01:31:42.708Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.