CVE-2005-2180

Published: Jul 11, 2005Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files.

Affected (2)

Products: Gnu: Gnats

Gnu

1 product

Gnats

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Gnu Gnats	Version 4.0
Gnu Gnats	Version 4.1.0

References (6)

http://marc.info/?l=bugtraq&m=112066901231154&w=2

Source: cve@mitre.org

http://secunia.com/advisories/15963

Source: cve@mitre.org

http://www.pi3.int.pl/adv/gnats.txt

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112066901231154&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/15963

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.pi3.int.pl/adv/gnats.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.