CVE-2006-1892: Medium severity alwil avast antivirus vulnerability
Published Apr 20, 2006
·Updated
avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/avast4 temporary directory.
Affected Software
1 affected component
ALWIL Avast Antivirus=1.0.5
Event History
Apr 20, 2006
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1892?
CVE-2006-1892 is considered a moderate severity vulnerability due to the potential for local users to exploit file permissions.
2
How do I fix CVE-2006-1892?
To fix CVE-2006-1892, ensure that the /tmp/_avast4_ directory has proper permissions and restrict access to trusted users only.
3
Who is affected by CVE-2006-1892?
CVE-2006-1892 affects users of avast! 4 Linux Home Edition version 1.0.5.
4
What type of attack does CVE-2006-1892 involve?
CVE-2006-1892 involves a symlink attack that allows the modification of arbitrary file permissions.
5
Can CVE-2006-1892 lead to further exploitation?
Yes, CVE-2006-1892 could lead to further exploitation if an attacker gains unauthorized permissions to critical files.