CVE-2005-2944

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-2944
The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwcc_out.txt temporary file.

4.6 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://bugs.gentoo.org/show_bug.cgi?id=104566 Patch
http://secunia.com/advisories/16833
http://www.zataz.net/adviso/gwcc-09052005.txt Vendor Advisory
http://bugs.gentoo.org/show_bug.cgi?id=104566 Patch
http://secunia.com/advisories/16833
http://www.zataz.net/adviso/gwcc-09052005.txt Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:brent_ely:gnome_workstation_command_center:*:*:*:*:*:*:*:*
cpe:2.3:a:brent_ely:gnome_workstation_command_center:0.9.8:*:*:*:*:*:*:*
History

21 Nov 2024, 00:00

Type Values Removed Values Added
References () http://bugs.gentoo.org/show_bug.cgi?id=104566 - Patch () http://bugs.gentoo.org/show_bug.cgi?id=104566 - Patch
References () http://secunia.com/advisories/16833 - () http://secunia.com/advisories/16833 -
References () http://www.zataz.net/adviso/gwcc-09052005.txt - Vendor Advisory () http://www.zataz.net/adviso/gwcc-09052005.txt - Vendor Advisory
Information

Published : 2005-09-16 20:03

Updated : 2024-11-21 00:00

NVD link : CVE-2005-2944

Mitre link : CVE-2005-2944

CVE.ORG link : CVE-2005-2944

JSON object : View

Products Affected

brent_ely

  • gnome_workstation_command_center
CWE
NVD-CWE-Other