PT-2005-2817
CVE-2005-1853
·
Publicado
2005-08-03
·
Atualizado
2008-09-05
Descrição por
CVSS 2.0
7.2
AltaMétricasAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Gopher client version 3.0.5
Description
The issue is related to the improper creation of temporary files by gopher.c in the Gopher client, allowing local users to gain privileges.
Recommendations
For Gopher client version 3.0.5, update to a newer version that properly handles temporary file creation to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾