Unscored CVE-2005-1880 EUVD-2005-1882GHSA-v4r8-qwq6-39xh

everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system c…

Published Jun 7, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.

References

1014110 vdb-entry
20050606 everybuddy <= 0.4.3 insecure temporary file creation mailing-list
13865 vdb-entry
http://bugs.gentoo.org/show_bug.cgi?id=94473
http://www.zataz.net/adviso/everybuddy-06062005.txt