CVE-2006-0055
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
11/01/2006
Last modified:
20/07/2017
Description
The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell.
Impact
Base Score 2.0
2.10
Severity 2.0
LOW
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:4.10:release_p8:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:4.11:release_p3:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:4.11:releng:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:4.11:stable:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:* | ||
| cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page