exploitDog

CVE-2005-4659

Опубликовано: 31 дек. 2005

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing ipcoprscfg to restore from this backup.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ipcop:ipcop:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:ipcop:ipcop:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:ipcop:ipcop:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:ipcop:ipcop:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:ipcop:ipcop:1.4.6:*:*:*:*:*:*:*

cpe:2.3:a:ipcop:ipcop:1.4.8:*:*:*:*:*:*:*

cpe:2.3:a:ipcop:ipcop:1.4.9:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00059

Низкий

2.1 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9m7h-2ggv-4q9j

github

почти 4 года назад

IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing ipcoprscfg to restore from this backup.

EPSS

Процентиль: 18%

0.00059

Низкий

2.1 Low

CVSS2

Дефекты

NVD-CWE-Other