Lucene search
HistoryJan 11, 2006 - 9:03 p.m.
CVE-2006-0055
cve
ispell
freebsd
symlink attack
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell.
Affected configurations
Node
freebsdfreebsdMatch4.10
ORfreebsdfreebsdMatch4.10release
ORfreebsdfreebsdMatch4.10release_p8
ORfreebsdfreebsdMatch4.10releng
ORfreebsdfreebsdMatch4.11release_p3
ORfreebsdfreebsdMatch4.11releng
ORfreebsdfreebsdMatch4.11stable
ORfreebsdfreebsdMatch5.0
ORfreebsdfreebsdMatch5.0alpha
ORfreebsdfreebsdMatch5.0release_p14
ORfreebsdfreebsdMatch5.0releng
ORfreebsdfreebsdMatch5.1
ORfreebsdfreebsdMatch5.1alpha
ORfreebsdfreebsdMatch5.1release
ORfreebsdfreebsdMatch5.1release_p5
ORfreebsdfreebsdMatch5.1releng
ORfreebsdfreebsdMatch5.2
ORfreebsdfreebsdMatch5.2.1release
ORfreebsdfreebsdMatch5.2.1releng
ORfreebsdfreebsdMatch5.3
ORfreebsdfreebsdMatch5.3release
ORfreebsdfreebsdMatch5.3releng
ORfreebsdfreebsdMatch5.3stable
ORfreebsdfreebsdMatch5.4pre-release
ORfreebsdfreebsdMatch5.4release
ORfreebsdfreebsdMatch5.4releng
ORfreebsdfreebsdMatch6.0release
ORfreebsdfreebsdMatch6.0stable
Related
openvas
openvas
FreeBSD Security Advisory (FreeBSD-SA-06:02.ee.asc)
2008-09-04 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-06:02.ee.asc)
2008-09-04 00:00:00
ubuntucve
ubuntucve
CVE-2006-0055
2006-01-11 00:00:00
cvelist
cvelist
CVE-2006-0055
2006-01-11 21:00:00
nvd
nvd
CVE-2006-0055
2006-01-11 21:03:00
prion
prion
Code injection
2006-01-11 21:03:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:02.ee
2006-01-11 00:00:00
freebsd
freebsd
ee -- temporary file privilege escalation
2006-01-11 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2006-0055