Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2005-3137HistoryOct 05, 2005 - 7:02 p.m.
CVE-2005-3137
2005-10-0519:02:00
Debian Security Bug Tracker
security-tracker.debian.org
7
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2005-2960.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | cfengine2 | < 2.2.10-7 | cfengine2_2.2.10-7_all.deb |
Related
osv
osv
cfengine - insecure temporary files
2005-10-01 00:00:00
cfengine2 - insecure temporary files
2005-10-01 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : cfengine (MDKSA-2005:184)
2005-10-19 00:00:00
Debian DSA-835-1 : cfengine - insecure temporary files
2005-10-05 00:00:00
Debian DSA-836-1 : cfengine2 - insecure temporary files
2005-10-05 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-836-1)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-835-1)
2008-01-17 00:00:00
FreeBSD Ports: cfengine
2008-09-04 00:00:00
debiancve
debiancve
CVE-2005-2960
2005-10-05 19:02:00
ubuntucve
ubuntucve
CVE-2005-2960
2005-10-05 00:00:00
CVE-2005-3137
2005-10-05 00:00:00
cve
cve
CVE-2005-2960
2005-10-05 19:02:00
CVE-2005-3137
2005-10-05 19:02:00
ubuntu
ubuntu
cfengine vulnerabilities
2005-10-10 00:00:00
securityvulns
securityvulns
[Full-disclosure] [USN-198-1] cfengine vulnerabilities
2005-10-10 00:00:00
freebsd
freebsd
cfengine -- arbitrary file overwriting vulnerability
2005-10-01 00:00:00
debian
debian
[SECURITY] [DSA 836-1] New cfengine2 packages fix arbitrary file overwriting
2005-10-01 14:10:50
[SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting
2005-10-01 07:56:19
[SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting
2005-10-01 07:56:19
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
Related for DEBIANCVE:CVE-2005-3137