2.1

CVE-2005-2960

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.

Data is provided by the National Vulnerability Database (NVD)
Gnu ≫ Cfengine Version1.5
Gnu ≫ Cfengine Version1.5.3-4
Gnu ≫ Cfengine Version1.6 Updatea10
Gnu ≫ Cfengine Version1.6 Updatea11
Gnu ≫ Cfengine Version1.6.5
Gnu ≫ Cfengine Version2.0.0
Gnu ≫ Cfengine Version2.0.1
Gnu ≫ Cfengine Version2.0.2
Gnu ≫ Cfengine Version2.0.3
Gnu ≫ Cfengine Version2.0.4
Gnu ≫ Cfengine Version2.0.5
Gnu ≫ Cfengine Version2.0.5 Updateb1
Gnu ≫ Cfengine Version2.0.5 Updatepre
Gnu ≫ Cfengine Version2.0.5 Updatepre2
Gnu ≫ Cfengine Version2.0.6
Gnu ≫ Cfengine Version2.0.7
Gnu ≫ Cfengine Version2.0.7 Updatep1
Gnu ≫ Cfengine Version2.0.7 Updatep2
Gnu ≫ Cfengine Version2.0.7 Updatep3
Gnu ≫ Cfengine Version2.0.8
Gnu ≫ Cfengine Version2.0.8 Updatep1
Gnu ≫ Cfengine Version2.1.0 Updatea6
Gnu ≫ Cfengine Version2.1.0 Updatea8
Gnu ≫ Cfengine Version2.1.0 Updatea9
Gnu ≫ Cfengine Version2.1.7 Updatep1
Gnu ≫ Cfengine Version2.1.8
Gnu ≫ Cfengine Version2.1.9
Gnu ≫ Cfengine Version2.1.16
Debian ≫ Debian Linux Version3.1
Debian ≫ Debian Linux Version3.1 Editionalpha
Debian ≫ Debian Linux Version3.1 Editionamd64
Debian ≫ Debian Linux Version3.1 Editionarm
Debian ≫ Debian Linux Version3.1 Editionhppa
Debian ≫ Debian Linux Version3.1 Editionia-32
Debian ≫ Debian Linux Version3.1 Editionia-64
Debian ≫ Debian Linux Version3.1 Editionm68k
Debian ≫ Debian Linux Version3.1 Editionmips
Debian ≫ Debian Linux Version3.1 Editionmipsel
Debian ≫ Debian Linux Version3.1 Editionppc
Debian ≫ Debian Linux Version3.1 Editions-390
Debian ≫ Debian Linux Version3.1 Editionsparc
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.193
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N