CVE-2005-1707
MEDIUM 4.6EPSS 1.0%
The fn_show_postinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file.
- CVSS v2.0 NVD
- 4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 0.98% chance of exploitation in the next 30 days, 62nd percentile
- Published
- 2005-05-24
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/15445
- http://www.zataz.net/adviso/webapp-config-05182005.txt
- http://securitytracker.com/id?1014027
- http://www.securityfocus.com/bid/13780