CVEvulnerability

CVE-2005-2180

2.1 LOW Published 2005-07-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-07-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N

Description

gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files.

Affected configurations

• gnu gnats 4.0 • gnu gnats 4.1.0

References