Skip to content
OpenAdvisories
Unscored CVE-2005-2231 EUVD-2005-2232GHSA-r4hr-57mh-jv58

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Published Jul 12, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Package: heartbeat Ecosystem: Debian

Description

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 heartbeat 1.2.3-12 —
Debian 13 heartbeat 1.2.3-12 —
Debian 12 heartbeat 1.2.3-12 —
Debian 3.1 heartbeat 1.2.3-9sarge3 DSA-761-2
Debian 3.0 heartbeat 0.4.9.0l-7.3 DSA-761-2

Advisories 1

References