← All advisories

Medium severity6.5NVD Advisory· Published Nov 7, 2019· Updated Jun 16, 2026

CVE-2010-2449

CVE-2010-2449

Description

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Gource/Gourcedescription
Gource/Gourcellm-create
Range: <=0.26

Patches

Vulnerability mechanics

References

3

bugs.debian.org/cgi-bin/bugreport.cginvdThird Party Advisory
security-tracker.debian.org/tracker/CVE-2010-2449nvdThird Party Advisory
www.securityfocus.com/bid/39529/infonvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.