Unscored CVE-2004-2231 EUVD-2004-2223GHSA-5wrh-pmjc-r65v

Zero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) p…

Published Jul 17, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Zero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) persistent_state or (2) env.properties.X temporary files.

References

10808 vdb-entry
12129 third-party-advisory
http://vapid.dhs.org/zerogadv.txt
installanywhere-symlink(16791) vdb-entry
8236 vdb-entry
20030620 ZeroG InstallAnywhere5 Symlink Vulnerability third-party-advisory