CVE-2010-2056

GNU gv < 3.7.0 - Arbitrary File Overwrite via Symlink Attack

Title source: llm
STIX 2.1

Description

GNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

References (8)

Core 8
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40532
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=599621
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1757
Patch, Vendor Advisory x_refsource_confirm
http://savannah.gnu.org/forum/forum.php?forum_id=6368
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043948.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40475
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043913.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/66249

Scores

EPSS 0.0004
EPSS Percentile 12.7%

Details

CWE
CWE-59
Status published
Products (11)
gnu/gv 3.5.8
gnu/gv 3.6.0
gnu/gv 3.6.1
gnu/gv 3.6.2
gnu/gv 3.6.3
gnu/gv 3.6.4
gnu/gv 3.6.5
gnu/gv 3.6.6
gnu/gv 3.6.7
gnu/gv 3.6.8
... and 1 more
Published Jul 22, 2010
Tracked Since Feb 18, 2026