CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
5.1%
GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file.
Vendor | Product | Version | CPE |
---|---|---|---|
gnu | gnump3d | * | cpe:2.3:a:gnu:gnump3d:*:*:*:*:*:*:*:* |
gnu | gnump3d | 2.9 | cpe:2.3:a:gnu:gnump3d:2.9:*:*:*:*:*:*:* |
gnu | gnump3d | 2.9.1 | cpe:2.3:a:gnu:gnump3d:2.9.1:*:*:*:*:*:*:* |
gnu | gnump3d | 2.9.2 | cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:* |
gnu | gnump3d | 2.9.3 | cpe:2.3:a:gnu:gnump3d:2.9.3:*:*:*:*:*:*:* |
gnu | gnump3d | 2.9.4 | cpe:2.3:a:gnu:gnump3d:2.9.4:*:*:*:*:*:*:* |
gnu | gnump3d | 2.9.5 | cpe:2.3:a:gnu:gnump3d:2.9.5:*:*:*:*:*:*:* |
gnu | gnump3d | 2.9.6 | cpe:2.3:a:gnu:gnump3d:2.9.6:*:*:*:*:*:*:* |
secunia.com/advisories/17646
secunia.com/advisories/17647
secunia.com/advisories/17656
www.debian.org/security/2005/dsa-901
www.gentoo.org/security/en/glsa/glsa-200511-16.xml
www.gnu.org/software/gnump3d/attacks.html#temporary-files
www.gnu.org/software/gnump3d/ChangeLog
www.novell.com/linux/security/advisories/2005_28_sr.html
www.securityfocus.com/bid/15497
www.vupen.com/english/advisories/2005/2489