CVE-2005-2918

MEDIUM 5.0CVE-2005-2918 · Published 15/09/2005 · updated 16/06/2026

In short

CVE-2005-2918 is a MEDIUM (CVSS 5.0) vulnerability affecting gtkdiskfree (gtkdiskfree).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gtkdiskfree gtkdiskfree	`≤ 1.9.3`	No fix yet

Description

The open_cmd_tube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the gtkdiskfree temporary file.

References

bugs.gentoo.org/show_bug.cgi · Vendor Advisory
marc.info
secunia.com/advisories/16951
secunia.com/advisories/17005
secunia.com/advisories/17056
debian.org/security/2005/dsa-822
gentoo.org/security/en/glsa/glsa-200510-01.xml
zataz.net/adviso/gtkdiskfree-09052005.txt · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free