PT-2005-3790 · Gnome · Gnome Workstation Command Center

Romang + 1 · Published 2005-09-16 · Updated 2008-09-05 · CVE-2005-2944

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GNOME Workstation Command Center versions 0.9.6 and earlier

Description The issue allows local users to create and overwrite arbitrary files via a symlink attack on the gwcc out.txt temporary file. This is due to a problem in the perform file save function.

Recommendations For versions 0.9.6 and earlier, consider restricting access to the perform file save function until a patch is available. As a temporary workaround, avoid using the perform file save function to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-2944

Affected Products

Gnome Workstation Command Center

References · 4

• http://zataz.net/adviso/gwcc-09052005.txt · Vendor Advisory
• http://bugs.gentoo.org/show_bug.cgi?id=104566 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-2944 · Security Note
• http://secunia.com/advisories/16833 · Note