CVE-2005-0787 Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords.
LowCVSS 2.1
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wine | = 2005-02-11 | No fix listed |
| wine | = 2005-03-05 | No fix listed |
| wine | = 2005-03-10 | No fix listed |
| debian/wine(Debian:12) | < 0.0.20050310-1.1 | 0.0.20050310-1.1 |
| debian/wine(Debian:13) | < 0.0.20050310-1.1 | 0.0.20050310-1.1 |
References
- bugs.winehq.org exploit patch
- 20050314 [ZH2005-02SA] Insecure tmp file creation in Wine mailing-list
- 1013428 vdb-entry
- 12791 vdb-entry
- www.zone-h.org exploit patch
- wine-registry-information-disclosure(19697) vdb-entry
- Debian Security Tracker CVE-2005-0787 vendor-advisory