CVE-2005-1915 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-1915
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-1915

Description: The log4sh_readProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames.

CVE Status: Candidate

References: VULNWATCH http://archives.neohapsis.com/archives/vulnwatch/2005-q3/0001.html SAID Secunia Advisory: SA15899 MISC http://www.zataz.net/adviso/log4sh-06092005.txt FULLDISC http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/034873.html CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=94069 BID 14140

Return to the previous page.