Lucene search

[email protected]CVE-2005-4660

HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-4660

2005-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ipcop firewall

cve-2005-4660

race condition

privilege escalation

7.3 High

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by “nobody” but not yet encrypted, then executing ipcoprscfg to restore from this backup.

CPENameOperatorVersion
ipcop:ipcopipcopeq1.4.5
ipcop:ipcopipcopeq1.4.4
ipcop:ipcopipcopeq1.4.2
ipcop:ipcopipcopeq1.4.6
ipcop:ipcopipcopeq1.4.9
ipcop:ipcopipcopeq1.4.8
ipcop:ipcopipcopeq1.4.1

CPE	Name	Operator	Version
ipcop:ipcop	ipcop	eq	1.4.5
ipcop:ipcop	ipcop	eq	1.4.4
ipcop:ipcop	ipcop	eq	1.4.2
ipcop:ipcop	ipcop	eq	1.4.6
ipcop:ipcop	ipcop	eq	1.4.9
ipcop:ipcop	ipcop	eq	1.4.8
ipcop:ipcop	ipcop	eq	1.4.1

References

secunia.com/advisories/17513/

sourceforge.net/tracker/index.php?func=detail&aid=1344047&group_id=40604&atid=428516

www.securityfocus.com/bid/15378

7.3 High

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON