Lucene search
HistoryDec 27, 2005 - 11:03 p.m.
CVE-2005-3341
cve-2005-3341
dhis
dns
security
symlink attack
file overwrite
6.2 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.3%
DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by (1) register-q.sh and (2) register-p.sh.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dhis_tools:dns_package | dhis tools dns package | le | 5.0 |
Related
ubuntucve
ubuntucve
CVE-2005-3341
2005-12-27 00:00:00
debiancve
debiancve
CVE-2005-3341
2005-12-27 23:03:00
nessus
nessus
Debian DSA-928-1 : dhis-tools-dns - insecure temporary file
2006-10-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 928-1 (dhis-tools-dns)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-928-1)
2008-01-17 00:00:00
securityvulns
securityvulns
debian
debian
6.2 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2005-3341