PT-2005-2817
CVE-2005-1853
·
Published
2005-08-03
·
Updated
2008-09-05
Description by
CVSS 2.0
7.2
HighMetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Gopher client version 3.0.5
Description
The issue is related to the improper creation of temporary files by gopher.c in the Gopher client, allowing local users to gain privileges.
Recommendations
For Gopher client version 3.0.5, update to a newer version that properly handles temporary file creation to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾