CVE-2005-0393

2005-07-0504:00:00

Debian Security Bug Tracker

security-tracker.debian.org

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors.

OSVersionArchitecturePackageVersionFilename
Debian12allcrip< 3.5-1sarge2crip_3.5-1sarge2_all.deb
Debian11allcrip< 3.5-1sarge2crip_3.5-1sarge2_all.deb
Debian10allcrip< 3.5-1sarge2crip_3.5-1sarge2_all.deb
Debian999allcrip< 3.5-1sarge2crip_3.5-1sarge2_all.deb
Debian13allcrip< 3.5-1sarge2crip_3.5-1sarge2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	crip	< 3.5-1sarge2	crip_3.5-1sarge2_all.deb
Debian	11	all	crip	< 3.5-1sarge2	crip_3.5-1sarge2_all.deb
Debian	10	all	crip	< 3.5-1sarge2	crip_3.5-1sarge2_all.deb
Debian	999	all	crip	< 3.5-1sarge2	crip_3.5-1sarge2_all.deb
Debian	13	all	crip	< 3.5-1sarge2	crip_3.5-1sarge2_all.deb