graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier.
References
Link | Resource |
---|---|
http://www.debian.org/security/2005/dsa-857 | Patch Vendor Advisory |
http://www.mandriva.com/security/advisories?name=MDKSA-2005:188 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/15050 | Patch |
http://secunia.com/advisories/17121 | Patch Vendor Advisory |
http://secunia.com/advisories/17125 | Patch Vendor Advisory |
http://secunia.com/advisories/17207 | Patch Vendor Advisory |
https://usn.ubuntu.com/208-1/ |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-12-30 21:00
Updated : 2018-10-03 14:34
NVD link : CVE-2005-4803
Mitre link : CVE-2005-4803
JSON object : View
CWE
Products Affected
graphviz
- graphviz