CVE-2005-4659

EPSS 0.35%
Veröffentlicht 31.12.2005 05:00:00
Zuletzt bearbeitet 16.06.2026 22:19:11
Erkennungen
Login

IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing ipcoprscfg to restore from this backup.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ipcop ≫ Ipcop Version 1.4.1

Ipcop ≫ Ipcop Version 1.4.2

Ipcop ≫ Ipcop Version 1.4.4

Ipcop ≫ Ipcop Version 1.4.5

Ipcop ≫ Ipcop Version 1.4.6

Ipcop ≫ Ipcop Version 1.4.8

Ipcop ≫ Ipcop Version 1.4.9

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.35%	0.265

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/17513/

Patch

Vendor Advisory

http://sourceforge.net/project/shownotes.php?release_id=369759

http://sourceforge.net/tracker/index.php?func=detail&aid=1344032&group_id=40604&atid=428516

http://www.securityfocus.com/bid/15377

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/23056

https://nvd.nist.gov/vuln/detail/CVE-2005-4659

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-4659

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-4659

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2005-4659