CVE-2005-3126

Published: Dec 31, 2005Modified: Apr 16, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary (a) output and (b) error files.

Affected (2)

Products: Antiword: Antiword

Antiword

1 product

Antiword

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Antiword Antiword	Version 0.32
Antiword Antiword	Version 0.35

Related CWEs

CWE-59

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (12)

http://secunia.com/advisories/15866

Source: security@debian.org

Vendor Advisory

http://secunia.com/advisories/18530

Source: security@debian.org

PatchVendor Advisory

http://www.debian.org/security/2005/dsa-945

Source: security@debian.org

http://www.securityfocus.com/bid/16278

Source: security@debian.org

http://www.vupen.com/english/advisories/2006/0242

Source: security@debian.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/24194

Source: security@debian.org

http://secunia.com/advisories/15866