Lucene search

K
ubuntuUbuntuUSN-208-1
HistoryOct 17, 2005 - 12:00 a.m.

graphviz vulnerability

2005-10-1700:00:00
ubuntu.com
70

6.1 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.8%

Releases

  • Ubuntu 5.04

Details

Javier Fernández-Sanguino Peña discovered that the “dotty” tool
created and used temporary files in an insecure way. A local attacker
could exploit this with a symlink attack to create or overwrite
arbitrary files with the privileges of the user running dotty.

OSVersionArchitecturePackageVersionFilename
Ubuntu5.04noarchgraphviz< *UNKNOWN

6.1 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.8%