Lucene search
HistoryApr 26, 2005 - 4:00 a.m.
CVE-2005-1270
rootkit hunter
cve-2005-1270
symlink attack
security vulnerability
nvd
6.1 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.3%
The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
Related
openvas
openvas
Gentoo Security Advisory GLSA 200504-25 (rkhunter)
2008-09-24 00:00:00
FreeBSD Ports: rkhunter
2008-09-04 00:00:00
nessus
nessus
debiancve
debiancve
CVE-2005-1270
2005-04-26 04:00:00
CVE-2008-4982
2008-11-06 15:55:00
securityvulns
securityvulns
[ GLSA 200504-25 ] Rootkit Hunter: Insecure temporary file creation
2005-04-28 00:00:00
gentoo
gentoo
Rootkit Hunter: Insecure temporary file creation
2005-04-26 00:00:00
freebsd
freebsd
rkhunter -- insecure temporary file creation
2005-04-26 00:00:00
cve
cve
CVE-2008-4982
2008-11-06 15:55:00
ubuntucve
ubuntucve
CVE-2008-4982
2008-11-06 00:00:00
prion
prion
Code injection
2008-11-06 15:55:00
6.1 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2005-1270