gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.

This advisory adds security support for the stable amd64 distribution.
It covers all security updates since the release of sarge, which were missing updated packages for the not yet official amd64 port. Future security advisories will include updates for this port as well.

John Goerzen discovered that gopher, a client for the Gopher Distributed Hypertext protocol, creates temporary files in an insecure fashion.

ID	Name	Product	Family	Type	Severity
57528	Debian DSA-773-1 : amd64 - several vulnerabilities	Nessus	Debian Local Security Checks	Local	critical
19319	Debian DSA-770-1 : gopher - insecure tmpfile creating	Nessus	Debian Local Security Checks	Local	high

Detections

Analytics

CVE-2005-1853

high

Tenable Plugins

critical

high