CVE-2005-4803

Description

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier.

References

https://usn.ubuntu.com/208-1/

http://www.securityfocus.com/bid/15050

http://www.mandriva.com/security/advisories?name=MDKSA-2005:188

http://www.debian.org/security/2005/dsa-857

http://secunia.com/advisories/17207

http://secunia.com/advisories/17125

http://secunia.com/advisories/17121

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3