CVE-2005-2180: GNU Gnats

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files.

Affected products

• GNU Gnats: version 4.0 only; version 4.1.0 only

Published 2005-07-11. Last modified 2026-06-16.