2 matches found
CVE-2006-6939
The CVE-2006-6939 issue affects GNU ed prior to 0.3, where a symlink attack on temporary files (likely in open_sbuf) allows local users to overwrite arbitrary files. Fedora advisories/Fedora updates for ed (e.g., ed 0.3-0.fc6/0.fc5) address this by rebuilding with fixes for CVE-2006-6939. The Ope...
CVE-2000-1137
CVE-2000-1137 affects GNU ed prior to 0.2-18.1. The issue arises from insecure temporary file handling, allowing a local user to influence files owned by others via a symlink attack in world-writable temporary directories. Consequence: potential local file overwrite or access when ed is invoked. ...