Lucene search
HistoryNov 29, 2005 - 2:00 a.m.
CVE-2004-2605
astats
1.6.5
local users
arbitrary files
symlink attack
security vulnerability
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files.
Affected configurations
Node
astatsastatsMatch1.6.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| astats:astats | astats | eq | 1.6.5 |
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2004-2605