PT-2005-3271 · Mozilla · Thunderbird

Publicado 2005-08-05 · Atualizado 2018-10-03 · CVE-2005-2353

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Thunderbird (affected versions not specified)

Description The issue allows local users to create or overwrite arbitrary files via a symlink attack on temporary files created by run-mozilla.sh in Thunderbird when debugging is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2353

DSA-1046-1

DSA-1051-1

Produtos afetados

Thunderbird

Referências · 12

• https://nvd.nist.gov/vuln/detail/CVE-2005-2353 · Nota de Segurança
• http://secunia.com/advisories/19941 · Nota
• http://securityfocus.com/bid/14443 · Nota
• https://osv.dev/vulnerability/CVE-2005-2353 · Aviso do Fabricante
• http://secunia.com/advisories/19863 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2005:174 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2353 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-2353 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2005:173 · Aviso do Fabricante
• http://debian.org/security/2006/dsa-1046 · Aviso do Fabricante
• https://usn.ubuntu.com/157-1 · Aviso do Fabricante
• http://debian.org/security/2006/dsa-1051 · Aviso do Fabricante