CVE-2005-1916

Description

linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 4.0	ekg	1:1.5+20050808+1.6rc3-0etch1	DTSA-4-1
Debian 3.1	ekg	1:1.5+20050411-4	DSA-760-1

Advisories 2

DSA-760-1 ekg - several Debian Security (DSA / DLA) · Mar 9, 2026
DTSA-4-1 ekg - multiple vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026

References

DSA-760 vendor-advisory
20050721 Multiple vulnerabilities in libgadu and ekg package mailing-list
20050705 ekg insecure temporary file creation and arbitrary code execution mailing-list
http://www.zataz.net/adviso/ekg-06062005.txt