CVE-2005-1914

CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file.

Score

CVSS 2.0 2.1 Low

Status

Modified - secalert@redhat.com

Published

2005-07-18

Last modified

2024-09-16

Affected products

• Centericq (Centericq)

References

• http://www.debian.org/security/2005/dsa-754
• http://www.securityfocus.com/bid/14144
• http://www.zataz.net/adviso/centericq-06152005.txt