PT-2005-3790 · Gnome · Gnome Workstation Command Center

Romang + 1 · Publicado 2005-09-16 · Atualizado 2008-09-05 · CVE-2005-2944

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GNOME Workstation Command Center versions 0.9.6 and earlier

Description The issue allows local users to create and overwrite arbitrary files via a symlink attack on the gwcc out.txt temporary file. This is due to a problem in the perform file save function.

Recommendations For versions 0.9.6 and earlier, consider restricting access to the perform file save function until a patch is available. As a temporary workaround, avoid using the perform file save function to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-2944

Produtos afetados

Gnome Workstation Command Center

Referências · 4

• http://zataz.net/adviso/gwcc-09052005.txt · Aviso do Fabricante
• http://bugs.gentoo.org/show_bug.cgi?id=104566 · Correção
• http://secunia.com/advisories/16833 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2944 · Nota de Segurança