{"id":"DEBIAN-CVE-2014-4038","details":"ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.","modified":"2026-09-01T20:03:21.694588130Z","published":"2014-06-17T15:55:06.177Z","upstream":["CVE-2014-4038"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2014-4038"}],"affected":[{"package":{"name":"ppc64-diag","ecosystem":"Debian:12","purl":"pkg:deb/debian/ppc64-diag?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-5"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2014-4038.json"}}],"schema_version":"1.9.0"}