CVE-2005-3011
gnu texinfo: no CVSS score yet. EPSS 0.5% chance of exploitation in the next 30 days.
The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
- CWE
- CWE-59
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gnu:texinfo
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:01.texindex.asc
- ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328365
- http://docs.info.apple.com/article.html?artnum=305530
- http://lists.apple.com/archives/security-announce/2007/May/msg00004.html