Unscored CVE-2005-2300 EUVD-2005-2301GHSA-4x69-qp93-p8fv

Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg temporary file.

Published Jul 19, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skype_profile.jpg temporary file.

References

16105 third-party-advisory
20050716 [ZH2005-16SA] Insecure temporary file creation in Skype for Linux mailing-list
http://www.zone-h.org/advisories/read/id=7808