CVE-2005-2300: Low severity Skype Technologies Skype vulnerability
Published Jul 19, 2005
·Updated
Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skypeprofile.jpg temporary file.
Affected Software
1 affected component
Skype Technologies Skype<=1.1.0.20
Event History
Jul 19, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2300?
CVE-2005-2300 is considered to have a moderate severity level due to its potential for local file overwriting.
2
How do I fix CVE-2005-2300?
To fix CVE-2005-2300, upgrade Skype to a version later than 1.1.0.20.
3
What are the potential impacts of CVE-2005-2300?
The impact of CVE-2005-2300 includes unauthorized file modifications and potential data loss due to symlink attacks.
4
Who is affected by CVE-2005-2300?
Local users on systems running Skype versions 1.1.0.20 and earlier are affected by CVE-2005-2300.
5
What type of attack is associated with CVE-2005-2300?
CVE-2005-2300 is associated with a symlink attack that allows local file overwriting.