CVE-2006-5072
CVE-2006-5072
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack.
EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.novell.com/linux/security/advisories/2006_73_mono.html
- http://www.ubuntu.com/usn/usn-357-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29353
- http://secunia.com/advisories/22277
- http://secunia.com/advisories/23213
- http://secunia.com/advisories/22237
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:188
- http://www.securityfocus.com/bid/20340
- http://secunia.com/advisories/23154
- http://secunia.com/advisories/23776
- http://secunia.com/advisories/22614
- http://security.gentoo.org/glsa/glsa-200611-23.xml
- http://www.vupen.com/english/advisories/2006/3911
- http://fedoranews.org/cms/node/2401
- https://nvd.nist.gov/vuln/detail/CVE-2006-5072