CVE-2005-2663

2005-09-2119:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-2663

masqmail

local exploit

file overwrite

symlink attack

6.2 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file.

CPENameOperatorVersion
masqmail:masqmailmasqmaileq0.2.9
masqmail:masqmailmasqmaileq0.2.10
masqmail:masqmailmasqmaileq0.0.1
masqmail:masqmailmasqmaileq0.1.5
masqmail:masqmailmasqmaileq0.1.1
masqmail:masqmailmasqmaileq0.0.3
masqmail:masqmailmasqmaileq0.0.13
masqmail:masqmailmasqmaileq0.2.2
masqmail:masqmailmasqmaileq0.2.5
masqmail:masqmailmasqmaileq0.0.4

CPE	Name	Operator	Version
masqmail:masqmail	masqmail	eq	0.2.9
masqmail:masqmail	masqmail	eq	0.2.10
masqmail:masqmail	masqmail	eq	0.0.1
masqmail:masqmail	masqmail	eq	0.1.5
masqmail:masqmail	masqmail	eq	0.1.1
masqmail:masqmail	masqmail	eq	0.0.3
masqmail:masqmail	masqmail	eq	0.0.13
masqmail:masqmail	masqmail	eq	0.2.2
masqmail:masqmail	masqmail	eq	0.2.5
masqmail:masqmail	masqmail	eq	0.0.4