The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mono | Jul 30, 2024 | Oct 10, 2006 |
| Freebsd | — | Upgrade mono | Dec 10, 2025 | Oct 5, 2006 |
| Gentoo Linux | — | Upgrade dev-lang/mono. | Oct 30, 2017 | Oct 10, 2006 |
| Ubuntu | — | Upgrade mono-classlib-1.0Upgrade mono-classlib-2.0 | Nov 8, 2024 | Oct 10, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub