File Overwrite Vulnerability in GNOME Workstation Command Center by GNOME
CVE-2005-2944

Currently unrated

Key Information:

Vendor

Brent Ely

Status
Gnome Workstation Command Center
Vendor
CVE Published:
16 September 2005

What is CVE-2005-2944?

The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier versions is susceptible to a symlink attack. This vulnerability enables local users to create and overwrite arbitrary files by exploiting the gwcc_out.txt temporary file. Proper security measures must be implemented to mitigate this risk and prevent unauthorized file access.

References

http://secunia.com/advisories/16833
third-party-advisoryx_refsource_SECUNIA
http://bugs.gentoo.org/show_bug.cgi?id=104566
x_refsource_CONFIRM
http://www.zataz.net/adviso/gwcc-09052005.txt
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.