Lucene search

K
freebsdFreeBSD0CF3480D-5FDF-11D9-B721-00065BE4B5B6
HistoryNov 24, 2004 - 12:00 a.m.

helvis -- arbitrary file deletion problem

2004-11-2400:00:00
vuxml.freebsd.org
18

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%

The setuid root elvprsv utility, used to preserve
recovery helvis files, can be abused by local users to delete
with root privileges.
The problem is that elvprsv deletes files when it thinks they
have become corrupt. When elvprsv is pointed to a normal file then
it will almost always think the file is corrupt and deletes it.
This behavior may be exploited by local attackers to delete critical
files.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchko-helvis<= 1.8h2_1UNKNOWN
FreeBSDanynoarchhelvis<= 1.8h2_1UNKNOWN

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%

Related for 0CF3480D-5FDF-11D9-B721-00065BE4B5B6