CVE-2005-4772

Опубликовано: 31 дек. 2005

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013.

Ссылки

http://www.novell.com/linux/security/advisories/2005_22_sr.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/15026
Patch
http://www.novell.com/linux/security/advisories/2005_22_sr.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/15026
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:suse:suse_linux_openexchange_server:4.0:*:*:*:*:*:*:*

cpe:2.3:a:suse:suse_linux_school_server:gold:*:*:*:*:*:*:*

cpe:2.3:a:suse:suse_linux_standard_server:8.0:*:*:*:*:*:*:*

cpe:2.3:a:suse:suse_sled_beagle:10.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:8.0:*:retail_solution:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:8.2:*:personal:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:8.2:*:professional:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.0:*:personal:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.0:*:professional:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*

cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*

EPSS

Процентиль: 51%

0.00279

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-r6gm-mf7m-68qc

github

почти 4 года назад