CVE-2006-0055

Published: Jan 11, 2006Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell.

Affected (28)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 4.10
Freebsd Freebsd	Version 4.10 release
Freebsd Freebsd	Version 4.10 release_p8
Freebsd Freebsd	Version 4.10 releng
Freebsd Freebsd	Version 4.11 release_p3
Freebsd Freebsd	Version 4.11 releng
Freebsd Freebsd	Version 4.11 stable
Freebsd Freebsd	Version 5.0
Freebsd Freebsd	Version 5.0 alpha
Freebsd Freebsd	Version 5.0 release_p14
Freebsd Freebsd	Version 5.0 releng
Freebsd Freebsd	Version 5.1
Freebsd Freebsd	Version 5.1 alpha
Freebsd Freebsd	Version 5.1 release
Freebsd Freebsd	Version 5.1 release_p5
Freebsd Freebsd	Version 5.1 releng
Freebsd Freebsd	Version 5.2.1 release
Freebsd Freebsd	Version 5.2.1 releng
Freebsd Freebsd	Version 5.2
Freebsd Freebsd	Version 5.3
Freebsd Freebsd	Version 5.3 release
Freebsd Freebsd	Version 5.3 releng
Freebsd Freebsd	Version 5.3 stable
Freebsd Freebsd	Version 5.4 pre-release
Freebsd Freebsd	Version 5.4 release
Freebsd Freebsd	Version 5.4 releng
Freebsd Freebsd	Version 6.0 release
Freebsd Freebsd	Version 6.0 stable