Tatsuya Kinoshita has reported a vulnerability in Lookup, which can be exploited by malicious, local users to perform certain actions with escalated privileges.

The vulnerability is caused due to temporary files being created insecurely. This can be exploited via symlink attacks to overwrite arbitrary files with the permissions of the user running the application.

Successful exploitation requires that the "ndeb-binary" feature is used.

Solution
Restrict access to trusted persons only. Do not use the "ndeb-binary" feature.

Provided and/or discovered by
Tatsuya Kinoshita

Original Advisory
http://www.us.debian.org/security/2007/dsa-1269

Deep Links
Links available in Customer Area