4.6

CVE-2005-3148

StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Storebackup ≫ Storebackup Version 1.1
Storebackup ≫ Storebackup Version 1.2
Storebackup ≫ Storebackup Version 1.3
Storebackup ≫ Storebackup Version 1.4
Storebackup ≫ Storebackup Version 1.5
Storebackup ≫ Storebackup Version 1.6
Storebackup ≫ Storebackup Version 1.7
Storebackup ≫ Storebackup Version 1.8
Storebackup ≫ Storebackup Version 1.8.1
Storebackup ≫ Storebackup Version 1.9
Storebackup ≫ Storebackup Version 1.9.1
Storebackup ≫ Storebackup Version 1.10
Storebackup ≫ Storebackup Version 1.10.1
Storebackup ≫ Storebackup Version 1.11
Storebackup ≫ Storebackup Version 1.12
Storebackup ≫ Storebackup Version 1.12.1
Storebackup ≫ Storebackup Version 1.12.2
Storebackup ≫ Storebackup Version 1.13
Storebackup ≫ Storebackup Version 1.14
Storebackup ≫ Storebackup Version 1.15
Storebackup ≫ Storebackup Version 1.16
Storebackup ≫ Storebackup Version 1.16.1
Storebackup ≫ Storebackup Version 1.16.2
Storebackup ≫ Storebackup Version 1.17
Storebackup ≫ Storebackup Version 1.18
Storebackup ≫ Storebackup Version 1.18.1
Storebackup ≫ Storebackup Version 1.18.2
Storebackup ≫ Storebackup Version 1.18.3
Storebackup ≫ Storebackup Version 1.18.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.294
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434
http://secunia.com/advisories/17025
http://secunia.com/advisories/19489
http://sourceforge.net/project/shownotes.php?release_id=352676
Patch
Vendor Advisory
http://www.securityfocus.com/advisories/9384
Vendor Advisory
http://www.us.debian.org/security/2006/dsa-1022