CVE-2005-3011 The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
LowCVSS 1.2
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU texinfo | <= 4.8 | No fix listed |
| debian/texinfo(Debian:12) | < 4.8-1 | 4.8-1 |
| debian/texinfo(Debian:13) | < 4.8-1 | 4.8-1 |
| debian/texinfo(Debian:14) | < 4.8-1 | 4.8-1 |
References
- bugs.debian.org exploit
- docs.info.apple.com
- APPLE-SA-2007-05-24 vendor-advisory
- TSLSA-2005-0059 vendor-advisory
- 16816 third-party-advisory vendor-advisory
- 17070 third-party-advisory vendor-advisory
- 17076 third-party-advisory vendor-advisory
- 17093 third-party-advisory vendor-advisory
- 17211 third-party-advisory vendor-advisory
- 17215 third-party-advisory vendor-advisory
- 18401 third-party-advisory vendor-advisory
- 22929 third-party-advisory vendor-advisory
- 23112 third-party-advisory vendor-advisory
- 24788 third-party-advisory vendor-advisory
- 25402 third-party-advisory vendor-advisory
- 1014992 vdb-entry
- 1015468 vdb-entry
- DSA-1219 vendor-advisory
- GLSA-200510-04 vendor-advisory
- MDKSA-2005:175 vendor-advisory
- SUSE-SR:2005:023 vendor-advisory
- RHSA-2006:0727 vendor-advisory
- 20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates mailing-list
- 14854 vdb-entry
- USN-194-1 vendor-advisory
- www.vmware.com
- www.vmware.com
- ADV-2007-1267 vdb-entry vendor-advisory
- ADV-2007-1939 vdb-entry vendor-advisory
- oval:org.mitre.oval:def:10589 signature vdb-entry
- Debian Security Tracker CVE-2005-3011 vendor-advisory
- bugs.debian.org issue-tracking