CVE-2005-1914
Fixed in a distro release EPSS <1%
CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file.
Products: centericq
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | centericq | 4.20.0-1sarge1 |
| Debian 4.0 | centericq | 4.20.0-8etch1 |