CVE-2005-0099
The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating...
CVE-2005-0099 is a low vulnerability (CVSS 2.1) in Abuse Abuse-sdl, published March 7, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in abuse 2.00+-3woody4.
The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files.
Exploit likelihood
What each source reports
NVD Score used
The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files.
- Record
CVE-2005-0099- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files.
- Record
CVE-2005-0099- Updated
- 2026-11-02
EUVDEUVD-2005-0100 No score
The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files.
- Record
EUVD-2005-0100- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gx76-c3v5-v823 No score
The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating...
The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files.
- Record
GHSA-gx76-c3v5-v823- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
abuseDebian:3.0 |
before 2.00+-3woody4, plus listed versions 2.00+-3 |
2.00+-3woody4 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |