CVE-2005-2944

The CVE-2005-2944 entry applies to GNOME Workstation Command Center (gwcc) 0.9.6 and earlier. The vulnerability arises in perform_file_save, where a symlink attack on the temporary file gwcc_out.txt enables local users to create and overwrite arbitrary files. The NVD entry lists a local attack ve...

[VulnWatch] gwcc insecure temporary file creation

gwcc insecure temporary file creation Vendor: http://gwcc.sourceforge.net/ Advisory: http://www.zataz.net/adviso/gwcc-09052005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created insecurely. This can be...

gwcc symbolic links problem

Symbolic links problem on temporary file creation...