CVE-2009-4193
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2009-4193
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2009-4193.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2009-4193
- Published
- 2009-12-03T19:30:00Z
- Modified
- 2024-11-21T01:09:07Z
- Summary
- [none]
- Details
-
Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file.
- References
-
- http://secunia.com/advisories/36897
- http://www.securityfocus.com/bid/36529
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548546
- http://osvdb.org/58389
- http://trac.openstreetmap.org/ticket/2320
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53486
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00869.html
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00870.html
- https://security-tracker.debian.org/tracker/CVE-2009-4193
Affected packages
Debian:11 / merkaartor
Package
- Name
- merkaartor
- Purl
- pkg:deb/debian/merkaartor?arch=source
Debian:12 / merkaartor
Package
- Name
- merkaartor
- Purl
- pkg:deb/debian/merkaartor?arch=source
Debian:13 / merkaartor
Package
- Name
- merkaartor
- Purl
- pkg:deb/debian/merkaartor?arch=source