CVE-2004-1179: Debian Debmake

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories.

Affected products

• Debian Debmake: from 3.6, before 3.6.10 (fixed in 3.6.10); from 3.7, before 3.7.7 (fixed in 3.7.7)

Published 2004-12-31. Last modified 2026-06-16.