Lucene search

K
cveDebianCVE-2005-3885
HistoryNov 29, 2005 - 7:03 p.m.

CVE-2005-3885

2005-11-2919:03:00
debian
web.nvd.nist.gov
43
inkscape
ps2epsi
vulnerability
symlink attack
file overwrite
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

Low

EPSS

0

Percentile

5.1%

The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file.

Affected configurations

Nvd
Node
inkscapeinkscapeMatch0.41
VendorProductVersionCPE
inkscapeinkscape0.41cpe:2.3:a:inkscape:inkscape:0.41:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6

Confidence

Low

EPSS

0

Percentile

5.1%