CVE-2005-2656: Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows lo...

Security readout for executives and security teams

Polygen before 1.0.6 created generated grammar files with permissions that allowed any local user to write to them. That could let a local user consume disk space and disrupt service. The public record does not show a remote attack path or confirmed active exploitation. Exposure is likely limited to hosts with Polygen versions before 1.0.6 installed, especially multi-user systems or shared environments where local users can run or influence Polygen output. Treat this as a targeted hygiene fix for legacy or shared systems, not an internet-wide emergency. Prioritize where Polygen is installed on multi-user hosts or systems with constrained disk capacity. Mitigation focus: Upgrade Polygen to 1.0.6 or the fixed vendor package referenced by Debian DSA-794.; Restrict local access to affected systems until vulnerable Polygen installations are updated.; Review permissions on generated Polygen grammar objects and remove unsafe world-writable access where supported..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.