CVE Vulnerabilities

CVE-2005-2809

Published: Sep 07, 2005 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file.

Affected Software

Name Vendor Start Version End Version
Secure_internet_live_conferencing Silc 0.9.11 (including) 0.9.11 (including)
Secure_internet_live_conferencing Silc 0.9.12 (including) 0.9.12 (including)
Secure_internet_live_conferencing Silc 0.9.13 (including) 0.9.13 (including)
Secure_internet_live_conferencing Silc 0.9.14 (including) 0.9.14 (including)
Secure_internet_live_conferencing Silc 0.9.15 (including) 0.9.15 (including)
Secure_internet_live_conferencing Silc 0.9.16 (including) 0.9.16 (including)
Secure_internet_live_conferencing Silc 0.9.17 (including) 0.9.17 (including)
Secure_internet_live_conferencing Silc 0.9.18 (including) 0.9.18 (including)
Secure_internet_live_conferencing Silc 0.9.19 (including) 0.9.19 (including)
Secure_internet_live_conferencing Silc 0.9.20 (including) 0.9.20 (including)
Secure_internet_live_conferencing Silc 0.9.21 (including) 0.9.21 (including)
Secure_internet_live_conferencing Silc 1.0 (including) 1.0 (including)

References