| Package | Affected versions | Patched versions |
|---|---|---|
| centericq | = 4.10.0.1= 4.11.0.1= 4.12= 4.12.0.1= 4.13= 4.13.0.1= 4.14= 4.14.0.1= 4.20= 4.20.0.1= 4.5.0.3= 4.5.1= 4.5.1.3= 4.6.0= 4.6.0.3= 4.6.5= 4.6.5.3= 4.6.9= 4.6.9.3= 4.7.1= 4.7.1.3= 4.7.2= 4.7.2.3= 4.7.7= 4.7.7.3= 4.7.8= 4.7.8.3= 4.8.0= 4.8.0.1= 4.8.2= 4.8.2.1= 4.8.3= 4.8.3.1= 4.8.4= 4.8.4.1= 4.8.5= 4.8.5.1= 4.8.6= 4.8.6.1= 4.8.7= 4.8.7.1= 4.8.8= 4.8.8.1= 4.8.9= 4.9.0= 4.9.0.1= 4.9.1= 4.9.1.1= 4.9.10= 4.9.10.1= 4.9.11= 4.9.11.1= 4.9.12= 4.9.12.1= 4.9.2= 4.9.2.1= 4.9.3= 4.9.3.1= 4.9.4= 4.9.4.1= 4.9.5= 4.9.5.1= 4.9.6= 4.9.6.1= 4.9.7= 4.9.7.1= 4.9.8= 4.9.9= 4.9.9.1 |
CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free