6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
9.3%
cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.
bugs.gentoo.org/show_bug.cgi?id=107871
groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0
secunia.com/advisories/17037/
secunia.com/advisories/17038
secunia.com/advisories/17040
secunia.com/advisories/17142
secunia.com/advisories/17182
secunia.com/advisories/17215
www.debian.org/security/2005/dsa-835
www.debian.org/security/2005/dsa-836
www.mandriva.com/security/advisories?name=MDKSA-2005:184
www.novell.com/linux/security/advisories/2005_23_sr.html
www.securityfocus.com/bid/14994
www.ubuntu.com/usn/usn-198-1
exchange.xforce.ibmcloud.com/vulnerabilities/22489