GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file.
| Software | From | Fixed in |
|---|---|---|
| gnu / gnump3d | - | 2.9.7.x |
| gnu / gnump3d | 2.9 | 2.9.x |
| gnu / gnump3d | 2.9.1 | 2.9.1.x |
| gnu / gnump3d | 2.9.2 | 2.9.2.x |
| gnu / gnump3d | 2.9.3 | 2.9.3.x |
| gnu / gnump3d | 2.9.4 | 2.9.4.x |
| gnu / gnump3d | 2.9.5 | 2.9.5.x |
| gnu / gnump3d | 2.9.6 | 2.9.6.x |