CVE-2005-3349

2005-11-1822:03:00

CWE-59

debian

web.nvd.nist.gov

cve-2005-3349

nvd

gnump3d

symlink attack

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file.

Affected configurations

Nvd

Node

gnugnump3dRange≤2.9.7

gnugnump3dMatch2.9

gnugnump3dMatch2.9.1

gnugnump3dMatch2.9.2

gnugnump3dMatch2.9.3

gnugnump3dMatch2.9.4

gnugnump3dMatch2.9.5

gnugnump3dMatch2.9.6

VendorProductVersionCPE
gnugnump3d*cpe:2.3:a:gnu:gnump3d:*:*:*:*:*:*:*:*
gnugnump3d2.9cpe:2.3:a:gnu:gnump3d:2.9:*:*:*:*:*:*:*
gnugnump3d2.9.1cpe:2.3:a:gnu:gnump3d:2.9.1:*:*:*:*:*:*:*
gnugnump3d2.9.2cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:*
gnugnump3d2.9.3cpe:2.3:a:gnu:gnump3d:2.9.3:*:*:*:*:*:*:*
gnugnump3d2.9.4cpe:2.3:a:gnu:gnump3d:2.9.4:*:*:*:*:*:*:*
gnugnump3d2.9.5cpe:2.3:a:gnu:gnump3d:2.9.5:*:*:*:*:*:*:*
gnugnump3d2.9.6cpe:2.3:a:gnu:gnump3d:2.9.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnu	gnump3d	*	cpe:2.3:a:gnu:gnump3d::::::::
gnu	gnump3d	2.9	cpe:2.3:a:gnu:gnump3d:2.9:::::::*
gnu	gnump3d	2.9.1	cpe:2.3:a:gnu:gnump3d:2.9.1:::::::*
gnu	gnump3d	2.9.2	cpe:2.3:a:gnu:gnump3d:2.9.2:::::::*
gnu	gnump3d	2.9.3	cpe:2.3:a:gnu:gnump3d:2.9.3:::::::*
gnu	gnump3d	2.9.4	cpe:2.3:a:gnu:gnump3d:2.9.4:::::::*
gnu	gnump3d	2.9.5	cpe:2.3:a:gnu:gnump3d:2.9.5:::::::*
gnu	gnump3d	2.9.6	cpe:2.3:a:gnu:gnump3d:2.9.6:::::::*