CVE-2005-1707

🗓️ 24 May 2005 04:00:00Reported by mitreType

The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2005-1707	24 May 200504:00	–	nvd
OpenVAS	Gentoo Security Advisory GLSA 200506-13 (webapp-config)	24 Sep 200800:00	–	openvas
OpenVAS	Gentoo Security Advisory GLSA 200506-13 (webapp-config)	24 Sep 200800:00	–	openvas
Tenable Nessus	GLSA-200506-13 : webapp-config: Insecure temporary file handling	17 Jun 200500:00	–	nessus
Cvelist	CVE-2005-1707	24 May 200504:00	–	cvelist
Gentoo Linux	webapp-config: Insecure temporary file handling	17 Jun 200500:00	–	gentoo

Nvd

Node

gentoo linux_webapp-configMatch1.10r14

Source	Link
osvdb	www.osvdb.org/16746
gentoo	www.gentoo.org/security/en/glsa/glsa-200506-13.xml
securitytracker	www.securitytracker.com/id
secunia	www.secunia.com/advisories/15445
zataz	www.zataz.net/adviso/webapp-config-05182005.txt
vupen	www.vupen.com/english/advisories/2005/0809
bugs	www.bugs.gentoo.org/show_bug.cgi
securityfocus	www.securityfocus.com/bid/13780

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2005 04:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS24.6

EPSS0.00045