CVE-2005-0018 The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.
LowCVSS 2.1
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f2c open source project f2c translator | = 3.1 | No fix listed |
| debian/f2c(Debian:12) | < 20020621-3.4 | 20020621-3.4 |
| debian/f2c(Debian:13) | < 20020621-3.4 | 20020621-3.4 |
| debian/f2c(Debian:14) | < 20020621-3.4 | 20020621-3.4 |
References
- 14041 third-party-advisory
- 14052 third-party-advisory
- 1013028 vdb-entry
- DSA-661 patch vendor-advisory
- 12380 patch vdb-entry
- Debian Security Tracker CVE-2005-0018 vendor-advisory
- bugs.debian.org issue-tracking