CVE-2005-0069

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=110608387001863&w=2
http://secunia.com/advisories/13841/Patch, Vendor Advisory
http://securitytracker.com/id?1012938
http://www.redhat.com/support/errata/RHSA-2005-036.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-122.htmlPatch, Vendor Advisory
https://bugzilla.fedora.us/show_bug.cgi?id=2343Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18870
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9402
http://marc.info/?l=bugtraq&m=110608387001863&w=2
http://secunia.com/advisories/13841/Patch, Vendor Advisory
http://securitytracker.com/id?1012938
http://www.redhat.com/support/errata/RHSA-2005-036.htmlPatch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-122.htmlPatch, Vendor Advisory
https://bugzilla.fedora.us/show_bug.cgi?id=2343Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18870
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9402

Timeline

Published: Jan 13, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-00707.2Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configurat CVE-2005-00715.0vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.CVE-2005-00722.1zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files.CVE-2005-00734.6Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code.CVE-2005-00747.2Buffer overflow in pcdsvgaview in xpcd 2.08 allows local users to execute arbitrary code.CVE-2005-00755.0prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail co CVE-2005-00767.2Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the libr CVE-2005-00772.1The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file.CVE-2005-00784.6The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with CVE-2005-00794.6Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session.CVE-2005-00805.0The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail ad CVE-2005-00815.0MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request wi