CVE-2013-1444

A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows local users to overwrite arbitrary files via a symlink attack on /tmp/2222.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.3 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:N/I:P/A:P
debianCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
VendorProductVersion
debiantxt2man
1.5.5-2
debiantxt2man
1.5.5-4
marc_vertestxt2man
1.5.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
txt2man
bullseye
1.7.1-1+deb11u1
fixed
wheezy
no-dsa
squeeze
no-dsa
sid
1.7.1-4
fixed
trixie
1.7.1-4
fixed
bookworm
1.7.1-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
txt2man
raring
Fixed 1.5.5-4ubuntu0.13.04.1
released
quantal
Fixed 1.5.5-4ubuntu0.12.10.1
released
precise
Fixed 1.5.5-4ubuntu0.12.04.1
released
lucid
ignored
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724614
http://osvdb.org/97769
http://seclists.org/oss-sec/2013/q3/660
http://www.ubuntu.com/usn/USN-1979-1
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=724614
http://osvdb.org/97769
http://seclists.org/oss-sec/2013/q3/660
http://www.ubuntu.com/usn/USN-1979-1