PT-2005-2873 · Kpopper · Popper

Published 2005-07-05 · Updated 2008-09-05 · CVE-2005-1917

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions kpopper versions 1.0 and earlier

Description The issue allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-new temporary file.

Recommendations For versions 1.0 and earlier, consider restricting access to the temporary file .popper-new to prevent symlink attacks until a patch is available.

Fix

Related Identifiers

CVE-2005-1917

Affected Products

Popper

References · 2

• http://zataz.net/adviso/kpopper-06152005.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1917 · Security Note