CVE-2005-3785 Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which i...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX (eix) before 0.5.0_pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo linux eix | <= 0.3 | No fix listed |
References
- bugs.gentoo.org
- 17699 third-party-advisory vendor-advisory
- GLSA-200511-19 patch vendor-advisory
- 15541 vdb-entry
- ADV-2005-2539 vdb-entry