| Package | Affected versions | Patched versions |
|---|---|---|
| qgit | = 1.5.6_2pre1 |
The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on temporary files with predictable filenames.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free