← All advisories

Medium severity6.5NVD Advisory· Published Nov 7, 2019· Updated Jun 16, 2026

CVE-2010-2449

CVE-2010-2449

Description

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Gource/Gource2 versions
cpe:2.3:a:gource:gource:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gource:gource:*:*:*:*:*:*:*:*range: <=0.26
- (no CPE)range: <=0.26
Gource/Gourcedescription

Patches

Vulnerability mechanics

References

3

bugs.debian.org/cgi-bin/bugreport.cginvdThird Party Advisory
security-tracker.debian.org/tracker/CVE-2010-2449nvdThird Party Advisory
www.securityfocus.com/bid/39529/infonvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.