1.2

CVE-2005-4660

Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ipcop ≫ Ipcop Version1.4.1
Ipcop ≫ Ipcop Version1.4.2
Ipcop ≫ Ipcop Version1.4.4
Ipcop ≫ Ipcop Version1.4.5
Ipcop ≫ Ipcop Version1.4.6
Ipcop ≫ Ipcop Version1.4.8
Ipcop ≫ Ipcop Version1.4.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.21
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 1.2 1.9 2.9
AV:L/AC:H/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/17513/
Patch
http://sourceforge.net/tracker/index.php?func=detail&aid=1344047&group_id=40604&atid=428516
http://www.securityfocus.com/bid/15378