CVE-2005-3340 in tux paint

Summary

the tuxpaint-import.sh script in tux paint (tuxpaint) 0.9.14 and earlier creates temporary files insecurely with unknown impact and attack vectors.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 10/27/2005
• Disclosure: 12/31/2005
• Moderation: VulDB entry created
• Entries: 1: VDB-27869
• CPE: ready
• CWE: CWE-377 (Unconfirmed)
• CVSS: 8.4
• EPSS: 0.00060
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3340
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3340
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3340/