2.1

CVE-2005-2960

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Cfengine Version 1.5
Gnu ≫ Cfengine Version 1.5.3-4
Gnu ≫ Cfengine Version 1.6 Update a10
Gnu ≫ Cfengine Version 1.6 Update a11
Gnu ≫ Cfengine Version 1.6.5
Gnu ≫ Cfengine Version 2.0.0
Gnu ≫ Cfengine Version 2.0.1
Gnu ≫ Cfengine Version 2.0.2
Gnu ≫ Cfengine Version 2.0.3
Gnu ≫ Cfengine Version 2.0.4
Gnu ≫ Cfengine Version 2.0.5
Gnu ≫ Cfengine Version 2.0.5 Update b1
Gnu ≫ Cfengine Version 2.0.5 Update pre
Gnu ≫ Cfengine Version 2.0.5 Update pre2
Gnu ≫ Cfengine Version 2.0.6
Gnu ≫ Cfengine Version 2.0.7
Gnu ≫ Cfengine Version 2.0.7 Update p1
Gnu ≫ Cfengine Version 2.0.7 Update p2
Gnu ≫ Cfengine Version 2.0.7 Update p3
Gnu ≫ Cfengine Version 2.0.8
Gnu ≫ Cfengine Version 2.0.8 Update p1
Gnu ≫ Cfengine Version 2.1.0 Update a6
Gnu ≫ Cfengine Version 2.1.0 Update a8
Gnu ≫ Cfengine Version 2.1.0 Update a9
Gnu ≫ Cfengine Version 2.1.7 Update p1
Gnu ≫ Cfengine Version 2.1.8
Gnu ≫ Cfengine Version 2.1.9
Gnu ≫ Cfengine Version 2.1.16
Debian ≫ Debian Linux Version 3.1
Debian ≫ Debian Linux Version 3.1 Edition alpha
Debian ≫ Debian Linux Version 3.1 Edition amd64
Debian ≫ Debian Linux Version 3.1 Edition arm
Debian ≫ Debian Linux Version 3.1 Edition hppa
Debian ≫ Debian Linux Version 3.1 Edition ia-32
Debian ≫ Debian Linux Version 3.1 Edition ia-64
Debian ≫ Debian Linux Version 3.1 Edition m68k
Debian ≫ Debian Linux Version 3.1 Edition mips
Debian ≫ Debian Linux Version 3.1 Edition mipsel
Debian ≫ Debian Linux Version 3.1 Edition ppc
Debian ≫ Debian Linux Version 3.1 Edition s-390
Debian ≫ Debian Linux Version 3.1 Edition sparc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.34
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/17215
http://www.novell.com/linux/security/advisories/2005_23_sr.html
http://bugs.gentoo.org/show_bug.cgi?id=107871
Vendor Advisory
http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0
Patch
Vendor Advisory
http://secunia.com/advisories/17037/
Vendor Advisory
http://secunia.com/advisories/17038
http://secunia.com/advisories/17040
http://secunia.com/advisories/17142
http://secunia.com/advisories/17182
http://www.debian.org/security/2005/dsa-835
Patch
http://www.debian.org/security/2005/dsa-836
Patch
http://www.mandriva.com/security/advisories?name=MDKSA-2005:184
http://www.securityfocus.com/bid/14994
http://www.ubuntu.com/usn/usn-198-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/22489