CVE-2005-1914: Low severity centericq vulnerability

Published Jul 17, 2005

Updated

CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file.

Affected Software

69 affected components

CenterICQ centericq=4.9.9.1

CenterICQ centericq=4.8.3.1

CenterICQ centericq=4.9.9

CenterICQ centericq=4.9.4.1

CenterICQ centericq=4.8.6.1

CenterICQ centericq=4.9.11

CenterICQ centericq=4.9.10

CenterICQ centericq=4.10.0.1

CenterICQ centericq=4.5.1.3

CenterICQ centericq=4.8.4.1

CenterICQ centericq=4.8.2

CenterICQ centericq=4.9.1

CenterICQ centericq=4.6.9

CenterICQ centericq=4.6.0

CenterICQ centericq=4.7.8

CenterICQ centericq=4.9.6

CenterICQ centericq=4.7.2.3

CenterICQ centericq=4.8.7

CenterICQ centericq=4.9.3

CenterICQ centericq=4.7.7.3

CenterICQ centericq=4.9.0

CenterICQ centericq=4.8.4

CenterICQ centericq=4.9.12

CenterICQ centericq=4.6.5

CenterICQ centericq=4.8.9

CenterICQ centericq=4.20.0.1

CenterICQ centericq=4.7.2

CenterICQ centericq=4.13

CenterICQ centericq=4.7.7

CenterICQ centericq=4.13.0.1

CenterICQ centericq=4.20

CenterICQ centericq=4.9.12.1

CenterICQ centericq=4.9.7

CenterICQ centericq=4.6.0.3

CenterICQ centericq=4.8.5

CenterICQ centericq=4.9.0.1

CenterICQ centericq=4.8.0

CenterICQ centericq=4.5.0.3

CenterICQ centericq=4.6.5.3

CenterICQ centericq=4.9.6.1

CenterICQ centericq=4.9.2.1

CenterICQ centericq=4.8.6

CenterICQ centericq=4.9.3.1

CenterICQ centericq=4.9.1.1

CenterICQ centericq=4.5.1

CenterICQ centericq=4.9.11.1

CenterICQ centericq=4.8.7.1

CenterICQ centericq=4.12.0.1

CenterICQ centericq=4.9.4

CenterICQ centericq=4.7.1.3

CenterICQ centericq=4.9.5.1

CenterICQ centericq=4.9.10.1

CenterICQ centericq=4.8.5.1

CenterICQ centericq=4.7.8.3

CenterICQ centericq=4.6.9.3

CenterICQ centericq=4.8.8

CenterICQ centericq=4.9.5

CenterICQ centericq=4.9.2

CenterICQ centericq=4.8.0.1

CenterICQ centericq=4.8.3

CenterICQ centericq=4.8.8.1

CenterICQ centericq=4.11.0.1

CenterICQ centericq=4.9.8

CenterICQ centericq=4.8.2.1

CenterICQ centericq=4.14.0.1

CenterICQ centericq=4.9.7.1

CenterICQ centericq=4.14

CenterICQ centericq=4.7.1

CenterICQ centericq=4.12

Remediation

Patch Available

http://www.debian.org/security/2005/dsa-754

Event History

Jul 17, 2005

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1914?

CVE-2005-1914 has a high severity rating due to the potential for local users to exploit the symlink vulnerability to overwrite arbitrary files.

How do I fix CVE-2005-1914?

To fix CVE-2005-1914, update to a version of CenterICQ that no longer creates predictable temporary file names.

What versions of CenterICQ are affected by CVE-2005-1914?

CVE-2005-1914 affects CenterICQ versions 4.20.0 and earlier, including multiple variants of earlier versions.

What type of attack is associated with CVE-2005-1914?

CVE-2005-1914 is associated with a symlink attack that can result in the overwriting of files.

Who is impacted by CVE-2005-1914?

Local users on systems running affected versions of CenterICQ are at risk of exploitation due to CVE-2005-1914.