noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm.
References
Link | Resource |
---|---|
http://www.debian.org/security/2006/dsa-968 | Patch |
http://secunia.com/advisories/18809 | Vendor Advisory |
http://secunia.com/advisories/18812 | Patch Vendor Advisory |
http://www.ubuntu.com/usn/usn-254-1 | |
http://secunia.com/advisories/18967 | Patch Vendor Advisory |
http://www.gentoo.org/security/en/glsa/glsa-200602-14.xml | |
http://www.securityfocus.com/bid/16610 | |
http://secunia.com/advisories/19027 | Vendor Advisory |
http://www.vupen.com/english/advisories/2006/0547 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-12-30 21:00
Updated : 2011-03-07 18:26
NVD link : CVE-2005-3342
Mitre link : CVE-2005-3342
JSON object : View
CWE
Products Affected
norman_ramsey
- noweb