NetSight
IP …
low3.6

CVE-2005-4803

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Impact

graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: this issue was originally associated with a different CVE identifier, CVE-2005-2965, which had been used for multiple different issues. This is the correct identifier.

Affected products

VendorProductAffected versions
GraphvizGraphviz
through 2.2
Versions 1.5.1, 1.5.2, 1.5.3, 1.7.5.1, 1.7.5.2

References