← Vulnerability feed

Vulnerability record · CVE-2006-1892 · published 20 April 2006

CVE-2006-1892: Alwil avast antivirus vulnerability

Alwil · Avast Antivirus

avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/_avast4_ temporary directory.

4.9 CVSS 2.0 Medium EPSS 0.49% · top 60.4%
4.9CVSS 2.0 base score
0.49%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/_avast4_ temporary directory.

AV:L/AC:L/Au:N/C:C/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/19683
http://securityreason.com/securityalert/712
http://securityreason.com/securityalert/764
http://www.securityfocus.com/archive/1/431019/100/0/threaded
http://www.securityfocus.com/bid/17535 Exploit
http://www.vupen.com/english/advisories/2006/1387
http://secunia.com/advisories/19683
http://securityreason.com/securityalert/712
http://securityreason.com/securityalert/764
http://www.securityfocus.com/archive/1/431019/100/0/threaded
http://www.securityfocus.com/bid/17535 Exploit
http://www.vupen.com/english/advisories/2006/1387

Track CVE-2006-1892 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-2869Alwil avast antivirus vulnerabilityUnspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors.EPSS 1.7%7.5CVE-2006-4626Alwil avast antivirus vulnerabilityHeap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file …EPSS 4.7%7.5CVE-2005-2385Alwil avast antivirus vulnerabilityBuffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition …EPSS 4.0%7.5CVE-2005-1719Alwil avast antivirus vulnerabilityUnknown vulnerability in ALWIL avast! antivirus 4 (4.6.6230) and earlier, when running on Windows NT 4.0, does not properly detect certain viruses.EPSS 1.4%7.2CVE-2006-1355Alwil avast antivirus vulnerabilityavast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local user…EPSS 0.39%7.2CVE-2005-1770Alwil avast antivirus memory buffer overflow vulnerabilityBuffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (sy…EPSS 0.68%5.1CVE-2005-3214Alwil avast antivirus vulnerabilityMultiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious executable…EPSS 1.7%5.0CVE-2005-2384Alwil avast antivirus vulnerabilityDirectory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 a…EPSS 3.5%

Source: NIST National Vulnerability Database (record CVE-2006-1892), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.