CVE-2005-3341 DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by (1) register-q.sh and (2) register-p.sh.
LowCVSS 2.1
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by (1) register-q.sh and (2) register-p.sh.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dhis tools dns package | <= 5.0 | No fix listed |
| debian/dhis-tools-dns(Debian:11) | < 5.0-5 | 5.0-5 |
References
- 18227 third-party-advisory vendor-advisory
- 18228 patch third-party-advisory vendor-advisory
- DSA-928 patch vendor-advisory
- 21934 vdb-entry
- 21935 vdb-entry
- 16065 vdb-entry
- dhistools-temp-file-symlink(23859) vdb-entry
- security-tracker.debian.org vendor-advisory