CVEvulnerability

CVE-2005-1880

5.5 MEDIUM Published 2005-06-06 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-06-06
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected]): 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses: CWE-59

Description

everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.

Affected configurations

• everybuddy everybuddy (<= 0.4.3)

Weakness · CWE (1)

CWE-59 Improper Link Resolution Before File Access weakness

Referenced by CWE · observed example (2)

CWE-59 Improper Link Resolution Before File Access weakness
CWE-61 UNIX Symbolic Link (Symlink) Following weakness

References

http://bugs.gentoo.org/show_bug.cgi?id=94473 Exploit, Issue Tracking
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034422.html Not Applicable, Vendor Advisory
http://securitytracker.com/id?1014110 Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.securityfocus.com/bid/13865 Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.zataz.net/adviso/everybuddy-06062005.txt Broken Link, Vendor Advisory
http://bugs.gentoo.org/show_bug.cgi?id=94473 Exploit, Issue Tracking
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034422.html Not Applicable, Vendor Advisory
http://securitytracker.com/id?1014110 Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.securityfocus.com/bid/13865 Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.zataz.net/adviso/everybuddy-06062005.txt Broken Link, Vendor Advisory