CVE-2005-2693

Publication date 26 August 2005

Last updated 17 July 2025


Ubuntu priority

cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
cvs 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
gcvs 7.04 feisty
Fixed 1.0final-10ubuntu1
6.10 edgy
Fixed 1.0final-10ubuntu1
6.06 LTS dapper
Fixed 1.0final-10ubuntu1