Lucene search

[email protected]CVE-2005-3321

HistoryOct 27, 2005 - 10:02 a.m.

CVE-2005-3321

2005-10-2710:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-3321

suse linux

chkstat

permissions

hardlink

file modification

6.5 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.9%

JSON

chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions.

CPENameOperatorVersion
suse:suse_linuxsuse suse linuxeq9.3
suse:suse_linuxsuse suse linuxeq9.2
suse:suse_linuxsuse suse linuxeq9.1
suse:suse_linuxsuse suse linuxeq9.0
novell:suse_linuxnovell suse linuxeq10.0

CPE	Name	Operator	Version
suse:suse_linux	suse suse linux	eq	9.3
suse:suse_linux	suse suse linux	eq	9.2
suse:suse_linux	suse suse linux	eq	9.1
suse:suse_linux	suse suse linux	eq	9.0
novell:suse_linux	novell suse linux	eq	10.0

References

secunia.com/advisories/17290/

www.novell.com/linux/security/advisories/2005_62_permissions.html

www.osvdb.org/20263

www.securityfocus.com/bid/15182

exchange.xforce.ibmcloud.com/vulnerabilities/22853

6.5 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.9%

JSON

Related for CVE-2005-3321

suse1