ID CVE-2005-2945
Summary arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).
References
Vulnerable Configurations
  • cpe:2.3:a:arc:arc:*:*:*:*:*:*:*:*
    cpe:2.3:a:arc:arc:*:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 18-10-2016 - 03:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bugtraq 20050916 arc insecure temporary file creation
debian DSA-843
misc http://www.zataz.net/adviso/arc-09052005.txt
secunia
  • 16805
  • 17068
vulnwatch 20050916 arc insecure temporary file creation
Last major update 18-10-2016 - 03:31
Published 16-09-2005 - 21:03
Back to Top