CVE-2005-2960

Опубликовано: 05 окт. 2005

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:cfengine:1.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:1.5.3-4:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:1.6:a10:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:1.6:a11:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:1.6.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.5:b1:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.5:pre:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.5:pre2:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.7:p1:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.7:p2:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.7:p3:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.0.8:p1:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.0:a6:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.0:a8:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.0:a9:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.7:p1:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.8:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.9:*:*:*:*:*:*:*

cpe:2.3:a:gnu:cfengine:2.1.16:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*

EPSS

Процентиль: 23%

0.00074

Низкий

2.1 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-2960

ubuntu

почти 20 лет назад

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.

CVE-2005-2960

debian

почти 20 лет назад

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary fi ...

GHSA-wgqp-qmfp-f6mf

github

больше 3 лет назад

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.

BDU:2015-03297

fstec

больше 10 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие локальному злоумышленнику нарушить целостность защищаемой информации

BDU:2015-03296

fstec

больше 10 лет назад

EPSS

Процентиль: 23%

0.00074

Низкий

2.1 Low

CVSS2

Дефекты

NVD-CWE-Other