CVE-2005-1396

Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlink attack on the ce_edit_log temporary file.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:swlink:ce_ceterm:*:*:*:*:*:*:*:*
cpe:2.3:a:swlink:ce_ceterm:2.4:*:*:*:*:*:*:*
cpe:2.3:a:swlink:ce_ceterm:2.5:*:*:*:*:*:*:*
cpe:2.3:a:swlink:ce_ceterm:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:swlink:ce_ceterm:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:swlink:ce_ceterm:2.5.3:*:*:*:*:*:*:*
cpe:2.3:a:swlink:ce_ceterm:2.5.4:*:*:*:*:*:*:*

History

07 Nov 2023, 01:57

Type Values Removed Values Added
References
  • {'url': 'http://www.digitalmunition.com/DMA[2005-0501a].txt', 'name': 'http://www.digitalmunition.com/DMA[2005-0501a].txt', 'tags': ['Broken Link'], 'refsource': 'MISC'}
  • () http://www.digitalmunition.com/DMA%5B2005-0501a%5D.txt -

Information

Published : 2005-05-03 04:00

Updated : 2024-02-28 10:42


NVD link : CVE-2005-1396

Mitre link : CVE-2005-1396

CVE.ORG link : CVE-2005-1396


JSON object : View

Products Affected

swlink

  • ce_ceterm