6.4

CVE-2005-4772

liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Suse ≫ Suse Linux School Server Version gold
Suse ≫ Suse Sled Beagle Version 10.0
Suse ≫ Suse Linux Version 1.0 Edition desktop
Suse ≫ Suse Linux Version 8 Edition enterprise_server
Suse ≫ Suse Linux Version 8.0 Edition retail_solution
Suse ≫ Suse Linux Version 8.2 Edition personal
Suse ≫ Suse Linux Version 8.2 Edition professional
Suse ≫ Suse Linux Version 9.0
Suse ≫ Suse Linux Version 9.0 Edition enterprise_server
Suse ≫ Suse Linux Version 9.0 Edition personal
Suse ≫ Suse Linux Version 9.0 Edition professional
Suse ≫ Suse Linux Version 9.0 Edition x86_64
Suse ≫ Suse Linux Version 9.1 Edition personal
Suse ≫ Suse Linux Version 9.1 Edition professional
Suse ≫ Suse Linux Version 9.1 Edition x86_64
Suse ≫ Suse Linux Version 9.2 Edition personal
Suse ≫ Suse Linux Version 9.2 Edition professional
Suse ≫ Suse Linux Version 9.2 Edition x86_64
Suse ≫ Suse Linux Version 9.3 Edition personal
Suse ≫ Suse Linux Version 9.3 Edition professional
Suse ≫ Suse Linux Version 9.3 Edition x86_64
Suse ≫ Suse Linux Version 10.0 Edition oss
Suse ≫ Suse Linux Version 10.0 Edition professional
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.19% 0.64
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.novell.com/linux/security/advisories/2005_22_sr.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/15026
Patch