CVE-2005-3011

Severity: low (CVSS 1.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-09-21 · updated 2026-06-16
Weakness: CWE-59

Description

The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Affected products

GNU Texinfo: through 4.8

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328365
http://docs.info.apple.com/article.html?artnum=305530
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
http://secunia.com/advisories/16816
http://secunia.com/advisories/17070
http://secunia.com/advisories/17076
http://secunia.com/advisories/17093
http://secunia.com/advisories/17211
http://secunia.com/advisories/17215

Get alerted when CVE-2005-3011 or the next vulnerability affects your stack