CVE-2005-2918

MEDIO 5.0CVE-2005-2918 · Published 15/09/2005 · updated 16/06/2026

In breve

CVE-2005-2918 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda gtkdiskfree (gtkdiskfree).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 71.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
gtkdiskfree gtkdiskfree	`≤ 1.9.3`	No fix yet

Description

The open_cmd_tube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the gtkdiskfree temporary file.

References

bugs.gentoo.org/show_bug.cgi · Vendor Advisory
marc.info
secunia.com/advisories/16951
secunia.com/advisories/17005
secunia.com/advisories/17056
debian.org/security/2005/dsa-822
gentoo.org/security/en/glsa/glsa-200510-01.xml
zataz.net/adviso/gtkdiskfree-09052005.txt · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free