← All advisories

Unrated severityNVD Advisory· Published Jul 12, 2005· Updated Jun 16, 2026

CVE-2005-2240

CVE-2005-2240

Description

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file.

Affected products

2

Xpvm/Xpvm2 versions
cpe:2.3:a:xpvm:xpvm:1.2.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:xpvm:xpvm:1.2.5:*:*:*:*:*:*:*
- (no CPE)range: =1.2.5

Patches

Vulnerability mechanics

References

5

secunia.com/advisories/16040nvdVendor Advisory
secunia.com/advisories/19251nvd
www.debian.org/security/2006/dsa-1003nvd
www.securityfocus.com/bid/14228nvd
www.zataz.net/adviso/xpvm-06272005.txtnvd

News mentions

0

No linked articles in our index yet.