CVE-2005-1707 The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file.
MediumCVSS 4.6
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo linux webapp-config | = 1.10-r14 | No fix listed |
References
- bugs.gentoo.org
- 15445 third-party-advisory vendor-advisory
- 1014027 exploit patch vdb-entry
- GLSA-200506-13 vendor-advisory
- 16746 vdb-entry
- 13780 vdb-entry
- ADV-2005-0809 vdb-entry
- www.zataz.net exploit vendor-advisory