CVE Vulnerabilities

CVE-2005-4803

Published: Dec 31, 2005 | Modified: Oct 03, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
3.6 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier.

Affected Software

Name Vendor Start Version End Version
Graphviz Graphviz * 2.2 (including)
Graphviz Graphviz 1.5.1 (including) 1.5.1 (including)
Graphviz Graphviz 1.5.2 (including) 1.5.2 (including)
Graphviz Graphviz 1.5.3 (including) 1.5.3 (including)
Graphviz Graphviz 1.7.5.1 (including) 1.7.5.1 (including)
Graphviz Graphviz 1.7.5.2 (including) 1.7.5.2 (including)
Graphviz Graphviz 1.7.5.3 (including) 1.7.5.3 (including)
Graphviz Graphviz 1.7.5.4 (including) 1.7.5.4 (including)
Graphviz Graphviz 1.7.5.5 (including) 1.7.5.5 (including)
Graphviz Graphviz 1.7.5.6 (including) 1.7.5.6 (including)
Graphviz Graphviz 1.7.5.7 (including) 1.7.5.7 (including)
Graphviz Graphviz 1.7.5_0.1 (including) 1.7.5_0.1 (including)
Graphviz Graphviz 1.7.5_0.2 (including) 1.7.5_0.2 (including)
Graphviz Graphviz 1.7.5_0.3 (including) 1.7.5_0.3 (including)
Graphviz Graphviz 1.7.16.1 (including) 1.7.16.1 (including)
Graphviz Graphviz 1.7.16.2 (including) 1.7.16.2 (including)
Graphviz Graphviz 1.8.5.1 (including) 1.8.5.1 (including)
Graphviz Graphviz 1.8.5.2 (including) 1.8.5.2 (including)
Graphviz Graphviz 1.8.9.1 (including) 1.8.9.1 (including)
Graphviz Graphviz 1.10_2003-09-15_0415_1 (including) 1.10_2003-09-15_0415_1 (including)
Graphviz Graphviz 1.10_2003-09-15_0415_2 (including) 1.10_2003-09-15_0415_2 (including)
Graphviz Graphviz 1.12.1 (including) 1.12.1 (including)
Graphviz Graphviz 1.12.2 (including) 1.12.2 (including)
Graphviz Graphviz 1.12.3 (including) 1.12.3 (including)
Graphviz Graphviz 1.14.1 (including) 1.14.1 (including)
Graphviz Graphviz 1.16.1 (including) 1.16.1 (including)

References