Unscored CVE-2005-1914 EUVD-2005-1916GHSA-gx4g-jw36-g8hj

CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via…

Published Jul 17, 2005 · Updated Sep 16, 2024 · Assigned by redhat

Description

CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 4.0	centericq	4.20.0-8etch1	DTSA-2-1
Debian 3.1	centericq	4.20.0-1sarge1	DSA-754-1

Advisories 2

DSA-754-1 centericq - insecure temporary file Debian Security (DSA / DLA) · Mar 9, 2026
DTSA-2-1 centericq - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026

References

http://www.zataz.net/adviso/centericq-06152005.txt
DSA-754 vendor-advisory
14144 vdb-entry