CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Centericq | Centericq | 4.5.0.3 (including) | 4.5.0.3 (including) |
| Centericq | Centericq | 4.5.1 (including) | 4.5.1 (including) |
| Centericq | Centericq | 4.5.1.3 (including) | 4.5.1.3 (including) |
| Centericq | Centericq | 4.6.0 (including) | 4.6.0 (including) |
| Centericq | Centericq | 4.6.0.3 (including) | 4.6.0.3 (including) |
| Centericq | Centericq | 4.6.5 (including) | 4.6.5 (including) |
| Centericq | Centericq | 4.6.5.3 (including) | 4.6.5.3 (including) |
| Centericq | Centericq | 4.6.9 (including) | 4.6.9 (including) |
| Centericq | Centericq | 4.6.9.3 (including) | 4.6.9.3 (including) |
| Centericq | Centericq | 4.7.1 (including) | 4.7.1 (including) |
| Centericq | Centericq | 4.7.1.3 (including) | 4.7.1.3 (including) |
| Centericq | Centericq | 4.7.2 (including) | 4.7.2 (including) |
| Centericq | Centericq | 4.7.2.3 (including) | 4.7.2.3 (including) |
| Centericq | Centericq | 4.7.7 (including) | 4.7.7 (including) |
| Centericq | Centericq | 4.7.7.3 (including) | 4.7.7.3 (including) |
| Centericq | Centericq | 4.7.8 (including) | 4.7.8 (including) |
| Centericq | Centericq | 4.7.8.3 (including) | 4.7.8.3 (including) |
| Centericq | Centericq | 4.8.0 (including) | 4.8.0 (including) |
| Centericq | Centericq | 4.8.0.1 (including) | 4.8.0.1 (including) |
| Centericq | Centericq | 4.8.2 (including) | 4.8.2 (including) |
| Centericq | Centericq | 4.8.2.1 (including) | 4.8.2.1 (including) |
| Centericq | Centericq | 4.8.3 (including) | 4.8.3 (including) |
| Centericq | Centericq | 4.8.3.1 (including) | 4.8.3.1 (including) |
| Centericq | Centericq | 4.8.4 (including) | 4.8.4 (including) |
| Centericq | Centericq | 4.8.4.1 (including) | 4.8.4.1 (including) |
| Centericq | Centericq | 4.8.5 (including) | 4.8.5 (including) |
| Centericq | Centericq | 4.8.5.1 (including) | 4.8.5.1 (including) |
| Centericq | Centericq | 4.8.6 (including) | 4.8.6 (including) |
| Centericq | Centericq | 4.8.6.1 (including) | 4.8.6.1 (including) |
| Centericq | Centericq | 4.8.7 (including) | 4.8.7 (including) |
| Centericq | Centericq | 4.8.7.1 (including) | 4.8.7.1 (including) |
| Centericq | Centericq | 4.8.8 (including) | 4.8.8 (including) |
| Centericq | Centericq | 4.8.8.1 (including) | 4.8.8.1 (including) |
| Centericq | Centericq | 4.8.9 (including) | 4.8.9 (including) |
| Centericq | Centericq | 4.9.0 (including) | 4.9.0 (including) |
| Centericq | Centericq | 4.9.0.1 (including) | 4.9.0.1 (including) |
| Centericq | Centericq | 4.9.1 (including) | 4.9.1 (including) |
| Centericq | Centericq | 4.9.1.1 (including) | 4.9.1.1 (including) |
| Centericq | Centericq | 4.9.2 (including) | 4.9.2 (including) |
| Centericq | Centericq | 4.9.2.1 (including) | 4.9.2.1 (including) |
| Centericq | Centericq | 4.9.3 (including) | 4.9.3 (including) |
| Centericq | Centericq | 4.9.3.1 (including) | 4.9.3.1 (including) |
| Centericq | Centericq | 4.9.4 (including) | 4.9.4 (including) |
| Centericq | Centericq | 4.9.4.1 (including) | 4.9.4.1 (including) |
| Centericq | Centericq | 4.9.5 (including) | 4.9.5 (including) |
| Centericq | Centericq | 4.9.5.1 (including) | 4.9.5.1 (including) |
| Centericq | Centericq | 4.9.6 (including) | 4.9.6 (including) |
| Centericq | Centericq | 4.9.6.1 (including) | 4.9.6.1 (including) |
| Centericq | Centericq | 4.9.7 (including) | 4.9.7 (including) |
| Centericq | Centericq | 4.9.7.1 (including) | 4.9.7.1 (including) |
| Centericq | Centericq | 4.9.8 (including) | 4.9.8 (including) |
| Centericq | Centericq | 4.9.9 (including) | 4.9.9 (including) |
| Centericq | Centericq | 4.9.9.1 (including) | 4.9.9.1 (including) |
| Centericq | Centericq | 4.9.10 (including) | 4.9.10 (including) |
| Centericq | Centericq | 4.9.10.1 (including) | 4.9.10.1 (including) |
| Centericq | Centericq | 4.9.11 (including) | 4.9.11 (including) |
| Centericq | Centericq | 4.9.11.1 (including) | 4.9.11.1 (including) |
| Centericq | Centericq | 4.9.12 (including) | 4.9.12 (including) |
| Centericq | Centericq | 4.9.12.1 (including) | 4.9.12.1 (including) |
| Centericq | Centericq | 4.10.0.1 (including) | 4.10.0.1 (including) |
| Centericq | Centericq | 4.11.0.1 (including) | 4.11.0.1 (including) |
| Centericq | Centericq | 4.12 (including) | 4.12 (including) |
| Centericq | Centericq | 4.12.0.1 (including) | 4.12.0.1 (including) |
| Centericq | Centericq | 4.13 (including) | 4.13 (including) |
| Centericq | Centericq | 4.13.0.1 (including) | 4.13.0.1 (including) |
| Centericq | Centericq | 4.14 (including) | 4.14 (including) |
| Centericq | Centericq | 4.14.0.1 (including) | 4.14.0.1 (including) |
| Centericq | Centericq | 4.20 (including) | 4.20 (including) |
| Centericq | Centericq | 4.20.0.1 (including) | 4.20.0.1 (including) |
| Centericq | Ubuntu | dapper | * |
| Centericq | Ubuntu | edgy | * |
| Centericq | Ubuntu | feisty | * |
| Centerim | Ubuntu | devel | * |