Unscored severity · published Jul 11, 2005
CVE-2005-2180
gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access,…
–
CVSS
0.3%
EPSS
No
On KEV
Description
gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Gnats · Gnu
4.0; 4.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2180
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2180
marc.info
http://marc.info/?l=bugtraq&m=112066901231154&w=2
secunia.com
http://secunia.com/advisories/15963
www.pi3.int.pl
http://www.pi3.int.pl/adv/gnats.txt
More from Gnats
–
CVE-2007-2808
Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter
–
CVE-2004-0623
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog