PT-2005-2817 · Gopher · Gopher Client

John Goerzen · Published 2005-08-03 · Updated 2008-09-05 · CVE-2005-1853

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Gopher client version 3.0.5

Description The issue is related to the improper creation of temporary files by gopher.c in the Gopher client, allowing local users to gain privileges.

Recommendations For Gopher client version 3.0.5, update to a newer version that properly handles temporary file creation to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-1853

DSA-770-1

Affected Products

Gopher Client

References · 6

• 🔥 http://debian.org/security/2005/dsa-770 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2005-1853 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-1853 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1853 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1853 · Vendor Advisory
• http://securitytracker.com/alerts/2005/Jul/1014599.html · Note