Every CVESearch/Get API key

CVE-2005-1853

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local...

7.2 HighFix available

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.

Exploit likelihood

0.52%Down 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used7.2

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.

Record
CVE-2005-1853
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.

Record
CVE-2005-1853
Updated
2026-11-02
EUVDEUVD-2005-1855No score

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.

Record
EUVD-2005-1855
Updated
2026-11-03
GitHub AdvisoriesGHSA-3823-wj6r-jpc9No score

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local...

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.

Record
GHSA-3823-wj6r-jpc9
Updated
2026-11-02
OSVNo score

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.

Record
CVE-2005-1853
Updated
2026-11-02
OSVDEBIAN-CVE-2005-1853No score

gopher.c in the Gopher client 3.0.5 does not properly create temporary files, which allows local users to gain privileges.

Record
DEBIAN-CVE-2005-1853
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gopher
Debian:12
before 3.0.8
3.0.8
gopher
Debian:13
before 3.0.8
3.0.8
gopher
Debian:14
before 3.0.8
3.0.8
gopher
Debian:3.0
before 3.0.3woody3, plus listed versions
3.0.3woody13.0.3woody2
3.0.3woody3
gopher
Debian:3.1
before 3.0.7sarge1, plus listed versions
3.0.7
3.0.7sarge1

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1853 is a high vulnerability (CVSS 7.2) in University Of Minnesota Gopher, published July 29, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. Fixed in gopher 3.0.8.

References

MoveEnter Open