CVE-2005-3011: GNU Texinfo

Low severity, CVSS 1.2. EPSS: 0.5% chance of exploitation in the next 30 days.

The sort_offline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Affected products

• GNU Texinfo: up to and including 4.8

Published 2005-09-21. Last modified 2026-06-16.