CVE-2005-2992

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-10-13 · updated 2026-06-16

Description

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945.

Affected products

Arc: through 5.21j

References

http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0535.html
http://marc.info/?l=bugtraq&m=112689596714383&w=2
http://secunia.com/advisories/16805
http://secunia.com/advisories/17068
http://securityreason.com/securityalert/11
http://www.debian.org/security/2005/dsa-843
http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0535.html
http://marc.info/?l=bugtraq&m=112689596714383&w=2
http://secunia.com/advisories/16805
http://secunia.com/advisories/17068
http://securityreason.com/securityalert/11
http://www.debian.org/security/2005/dsa-843

Get alerted when CVE-2005-2992 or the next vulnerability affects your stack