Lucene search
HistoryJun 28, 2005 - 4:00 a.m.
CVE-2005-1759
cve-2005-1759
shtool
race condition
symlink attack
local users
arbitrary files
1.2 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.8%
Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751.
Affected configurations
Node
shtoolshtoolRange≤2.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| shtool:shtool | shtool | le | 2.0.1 |
Related
ubuntucve
ubuntucve
CVE-2005-1759
2005-06-28 00:00:00
CVE-2005-1751
2005-05-25 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200506-08 (GNU shtool)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200506-08 (GNU shtool)
2008-09-24 00:00:00
FreeBSD Ports: shtool
2008-09-04 00:00:00
cvelist
cvelist
CVE-2005-1759
2005-06-26 04:00:00
CVE-2005-1751
2005-05-25 04:00:00
gentoo
gentoo
GNU shtool, ocaml-mysql: Insecure temporary file creation
2005-06-11 00:00:00
nvd
nvd
CVE-2005-1759
2005-06-28 04:00:00
CVE-2005-1751
2005-05-25 04:00:00
nessus
nessus
GLSA-200506-08 : GNU shtool, ocaml-mysql: Insecure temporary file creation
2005-06-11 00:00:00
FreeBSD : shtool -- insecure temporary file creation (6596bb80-d026-11d9-9aed-000e0c2e438a)
2005-07-13 00:00:00
Debian DSA-789-1 : php4 - several vulnerabilities
2005-08-30 00:00:00
debiancve
debiancve
CVE-2005-1759
2005-06-28 04:00:00
CVE-2005-1751
2005-05-25 04:00:00
cve
cve
CVE-2005-1751
2005-05-25 04:00:00
securityvulns
securityvulns
[ GLSA 200506-08 ] GNU shtool, ocaml-mysql: Insecure temporary file creation
2005-06-12 00:00:00
ubuntu
ubuntu
PHP4 vulnerabilities
2005-08-21 00:00:00
centos
centos
php security update
2005-07-07 20:36:04
redhat
redhat
(RHSA-2005:564) php security update
2005-07-07 00:00:00
debian
debian
[SECURITY] [DSA 789-1] New PHP 4 packages fix several vulnerabilities
2005-08-29 15:31:06
[SECURITY] [DSA 789-1] New PHP 4 packages fix several vulnerabilities
2005-08-29 15:31:06
osv
osv
php4 - several
2005-08-29 00:00:00
1.2 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.8%
Related for CVE-2005-1759