CVE-2018-18654

Crossroads 2.81 does not properly handle the /tmp directory during a build of xr. A local attacker can first create a world-writable subdirectory in a certain location under the /tmp directory, wait until a user process copies xr there, and then replace the entire contents of this subdirectory to include a Trojan horse xr.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2018-10-26

Last modified

2024-09-16

Weaknesses

CWE-732

Affected products

• Crossroads (Debian)

References

• https://bugs.debian.org/911877