Vulnerability in Netbsd
CVE-2005-4691
imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions of XFree86 allows local users to overwrite arbitrary files via a symlink attack on the temporary file for the file.0 target, which is used for a pre-formatted manual page.
EPSS: 0.003 (26.5th percentile) — read the EPSS interpretation.
Affected products
- Netbsd — versions 1.6, 1.6.1, 1.6.2
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OSVDB, Patch, vdb-entry)