CVE-2005-1740
6.5 Medium
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
14.5%
fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack.
References
secunia.com/advisories/15471
secunia.com/advisories/16999
secunia.com/advisories/17135
secunia.com/advisories/18635
security.gentoo.org/glsa/glsa-200505-18.xml
securitytracker.com/id?1014039
www.mandriva.com/security/advisories?name=MDKSA-2006:025
www.osvdb.org/16778
www.redhat.com/support/errata/RHSA-2005-373.html
www.redhat.com/support/errata/RHSA-2005-395.html
www.securityfocus.com/bid/13715
www.vupen.com/english/advisories/2005/0598
www.zataz.net/adviso/net-snmp-05182005.txt
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11659
Related
6.5 Medium
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
14.5%