CVE-2013-1444

EUVD-2013-1481
A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows local users to overwrite arbitrary files via a symlink attack on /tmp/2222.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:N/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
Affected Products (NVD)
VendorProductVersion
debiantxt2man
1.5.5-2
debiantxt2man
1.5.5-4
marc_vertestxt2man
1.5.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
txt2man
bookworm
1.7.1-4
fixed
bullseye
1.7.1-1+deb11u1
fixed
sid
1.7.1-4
fixed
squeeze
no-dsa
trixie
1.7.1-4
fixed
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
txt2man
lucid
ignored
precise
Fixed 1.5.5-4ubuntu0.12.04.1
released
quantal
Fixed 1.5.5-4ubuntu0.12.10.1
released
raring
Fixed 1.5.5-4ubuntu0.13.04.1
released
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724614
http://osvdb.org/97769
http://seclists.org/oss-sec/2013/q3/660
http://www.ubuntu.com/usn/USN-1979-1
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724614
http://osvdb.org/97769
http://seclists.org/oss-sec/2013/q3/660
http://www.ubuntu.com/usn/USN-1979-1