PT-2005-3271 · Mozilla · Thunderbird

Published 2005-08-05 · Updated 2018-10-03 · CVE-2005-2353

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Thunderbird (affected versions not specified)

Description The issue allows local users to create or overwrite arbitrary files via a symlink attack on temporary files created by run-mozilla.sh in Thunderbird when debugging is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2353

DSA-1046-1

DSA-1051-1

Affected Products

Thunderbird

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2005-2353 · Security Note
• https://osv.dev/vulnerability/CVE-2005-2353 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:174 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2353 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2353 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:173 · Vendor Advisory
• http://debian.org/security/2006/dsa-1046 · Vendor Advisory
• https://usn.ubuntu.com/157-1 · Vendor Advisory
• http://debian.org/security/2006/dsa-1051 · Vendor Advisory
• http://secunia.com/advisories/19941 · Note
• http://securityfocus.com/bid/14443 · Note
• http://secunia.com/advisories/19863 · Note