CVE-2005-3331 viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
LowCVSS 2.1
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rogers software source mgdiff patch viewer | = 1.0 | No fix listed |
| debian/mgdiff(Debian:12) | < 1.0-28 | 1.0-28 |
| debian/mgdiff(Debian:12) | = 1.0-18 | No fix listed |
| debian/mgdiff(Debian:12) | = 1.0-24 | No fix listed |
| debian/mgdiff(Debian:12) | = 1.0-25 | No fix listed |
| debian/mgdiff(Debian:12) | = 1.0-26 | No fix listed |
| debian/mgdiff(Debian:12) | = 1.0-27 | No fix listed |
| debian/mgdiff(Debian:12) | = 1.0-3 | No fix listed |
| debian/mgdiff(Debian:12) | = 1.0-8 | No fix listed |
| debian/mgdiff(Debian:13) | < 1.0-28 | 1.0-28 |
| debian/mgdiff(Debian:13) | = 1.0-18 | No fix listed |
| debian/mgdiff(Debian:13) | = 1.0-24 | No fix listed |
| debian/mgdiff(Debian:13) | = 1.0-25 | No fix listed |
| debian/mgdiff(Debian:13) | = 1.0-26 | No fix listed |
| debian/mgdiff(Debian:13) | = 1.0-27 | No fix listed |
| debian/mgdiff(Debian:13) | = 1.0-3 | No fix listed |
| debian/mgdiff(Debian:13) | = 1.0-8 | No fix listed |
| debian/mgdiff(Debian:14) | < 1.0-28 | 1.0-28 |
| debian/mgdiff(Debian:14) | = 1.0-18 | No fix listed |
| debian/mgdiff(Debian:14) | = 1.0-24 | No fix listed |
| debian/mgdiff(Debian:14) | = 1.0-25 | No fix listed |
| debian/mgdiff(Debian:14) | = 1.0-26 | No fix listed |
| debian/mgdiff(Debian:14) | = 1.0-27 | No fix listed |
| debian/mgdiff(Debian:14) | = 1.0-3 | No fix listed |
| debian/mgdiff(Debian:14) | = 1.0-8 | No fix listed |
References
- bugs.debian.org vendor-advisory
- 17299 third-party-advisory vendor-advisory
- 15180 vdb-entry
- mgdiff-viewpatch-symlink(22846) vdb-entry
- Debian Security Tracker CVE-2005-3331 vendor-advisory
- bugs.debian.org issue-tracking