Privilege Escalation Vulnerability in dpkg by Debian

CVE-2004-2768

Summary

The dpkg version 1.9.21 contains a flaw that inadequately resets file metadata during the upgrade process. This imperfection can be exploited by local users to gain elevated privileges. By creating hard links to exploitable setuid, setgid files, or devices, attackers may leverage this vulnerability to potentially execute malicious actions with higher access rights than intended. This situation points to a significant security risk that must be addressed to ensure system integrity.

References