ID CVE-2005-1064
Summary The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files.
References
Vulnerable Configurations
  • cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:rsnapshot:filesystem_snapshot_utility:1.2:*:*:*:*:*:*:*
CVSS
Base: 4.6 (as of 18-10-2016 - 03:17)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:P/A:P
refmap via4
confirm http://www.rsnapshot.org/security/2005/001.html
fulldisc 20050410 rsnapshot Security Advisory 001
gentoo GLSA-200504-12
osvdb 15420
sectrack 1013674
secunia 14878
Last major update 18-10-2016 - 03:17
Published 10-04-2005 - 04:00
Last modified 18-10-2016 - 03:17
Back to Top