PT-2005-2817 · Gopher · Gopher Client

John Goerzen · Publicado 2005-08-03 · Atualizado 2008-09-05 · CVE-2005-1853

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Gopher client version 3.0.5

Description The issue is related to the improper creation of temporary files by gopher.c in the Gopher client, allowing local users to gain privileges.

Recommendations For Gopher client version 3.0.5, update to a newer version that properly handles temporary file creation to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-1853

DSA-770-1

Produtos afetados

Gopher Client

Referências · 6

• 🔥 http://debian.org/security/2005/dsa-770 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2005-1853 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-1853 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1853 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1853 · Aviso do Fabricante
• http://securitytracker.com/alerts/2005/Jul/1014599.html · Nota