FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-1916

This CVE name corresponds to:

Entered	Topic
2005-07-08	ekg -- insecure temporary file creation

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-1916 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-1916
Phase	Assigned(20050608)

Description

linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.

References

Source	Reference
BUGTRAQ	20050705 ekg insecure temporary file creation and arbitrary code execution
MISC	http://www.zataz.net/adviso/ekg-06062005.txt
BUGTRAQ	20050721 Multiple vulnerabilities in libgadu and ekg package
DEBIAN	DSA-760