Lucene search

FreeBSDBB99F803-5FDE-11D9-B721-00065BE4B5B6

HistoryNov 24, 2004 - 12:00 a.m.

helvis -- information leak vulnerabilities

2004-11-2400:00:00

vuxml.freebsd.org

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

JSON

Once a recovery file has been preserved by the setuid root elvprsv
utility it is placed in a worldreadable directory with worldreadable
permissions. This possibly allows sensitive information to leak.
In addition to this information leak, it is possible for users
to recover files that belong to other users by using elvrec, another
setuid root binary.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchko-helvis<= 1.8h2_1UNKNOWN
FreeBSDanynoarchhelvis<= 1.8h2_1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	ko-helvis	<= 1.8h2_1	UNKNOWN
FreeBSD	any	noarch	helvis	<= 1.8h2_1	UNKNOWN

References

people.freebsd.org/~niels/ports/korean/helvis/issues.txt

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for BB99F803-5FDE-11D9-B721-00065BE4B5B6