CVE-2005-1740

2005-05-2404:00:00

Debian Security Bug Tracker

security-tracker.debian.org

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.8%

JSON

fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack.

OSVersionArchitecturePackageVersionFilename
Debian12allnet-snmp< 5.9.3+dfsg-2net-snmp_5.9.3+dfsg-2_all.deb
Debian11allnet-snmp< 5.9+dfsg-4+deb11u1net-snmp_5.9+dfsg-4+deb11u1_all.deb
Debian10allnet-snmp< 5.7.3+dfsg-5+deb10u2net-snmp_5.7.3+dfsg-5+deb10u2_all.deb
Debian999allnet-snmp< 5.9.4+dfsg-1.1net-snmp_5.9.4+dfsg-1.1_all.deb
Debian13allnet-snmp< 5.9.4+dfsg-1.1net-snmp_5.9.4+dfsg-1.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	net-snmp	< 5.9.3+dfsg-2	net-snmp_5.9.3+dfsg-2_all.deb
Debian	11	all	net-snmp	< 5.9+dfsg-4+deb11u1	net-snmp_5.9+dfsg-4+deb11u1_all.deb
Debian	10	all	net-snmp	< 5.7.3+dfsg-5+deb10u2	net-snmp_5.7.3+dfsg-5+deb10u2_all.deb
Debian	999	all	net-snmp	< 5.9.4+dfsg-1.1	net-snmp_5.9.4+dfsg-1.1_all.deb
Debian	13	all	net-snmp	< 5.9.4+dfsg-1.1	net-snmp_5.9.4+dfsg-1.1_all.deb