Unscored CVE-2007-5839 EUVD-2007-5809GHSA-v5xm-v4c7-6hcj

The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary file…

Published Nov 6, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449149
SSA:2009-116-02 vendor-advisory
34870 third-party-advisory
27463 third-party-advisory
26326 vdb-entry
31180 third-party-advisory
ADV-2007-3714 vdb-entry
42061 vdb-entry
GLSA-200807-12 vendor-advisory
bitchx-ehostname-symlink(38262) vdb-entry