Lucene search
HistoryOct 05, 2005 - 9:02 p.m.
CVE-2005-3148
storebackup
1.19
symbolic links
incorrect ownership
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.4%
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership.
Affected configurations
Node
storebackupstorebackupMatch1.1
ORstorebackupstorebackupMatch1.2
ORstorebackupstorebackupMatch1.3
ORstorebackupstorebackupMatch1.4
ORstorebackupstorebackupMatch1.5
ORstorebackupstorebackupMatch1.6
ORstorebackupstorebackupMatch1.7
ORstorebackupstorebackupMatch1.8
ORstorebackupstorebackupMatch1.8.1
ORstorebackupstorebackupMatch1.9
ORstorebackupstorebackupMatch1.9.1
ORstorebackupstorebackupMatch1.10
ORstorebackupstorebackupMatch1.10.1
ORstorebackupstorebackupMatch1.11
ORstorebackupstorebackupMatch1.12
ORstorebackupstorebackupMatch1.12.1
ORstorebackupstorebackupMatch1.12.2
ORstorebackupstorebackupMatch1.13
ORstorebackupstorebackupMatch1.14
ORstorebackupstorebackupMatch1.15
ORstorebackupstorebackupMatch1.16
ORstorebackupstorebackupMatch1.16.1
ORstorebackupstorebackupMatch1.16.2
ORstorebackupstorebackupMatch1.17
ORstorebackupstorebackupMatch1.18
ORstorebackupstorebackupMatch1.18.1
ORstorebackupstorebackupMatch1.18.2
ORstorebackupstorebackupMatch1.18.3
ORstorebackupstorebackupMatch1.18.4
Node
susesuse_linux
Related
ubuntucve
ubuntucve
CVE-2005-3148
2005-10-05 00:00:00
debiancve
debiancve
CVE-2005-3148
2005-10-05 21:02:00
cvelist
cvelist
CVE-2005-3148
2005-10-05 04:00:00
nvd
nvd
CVE-2005-3148
2005-10-05 21:02:00
debian
debian
[SECURITY] [DSA 1022-1] New storebackup packages fix several vulnerabilities
2006-04-03 23:36:45
openvas
openvas
Debian: Security Advisory (DSA-1022-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 1022-1 (storebackup)
2008-01-17 00:00:00
nessus
nessus
Debian DSA-1022-1 : storebackup - several vulnerabilities
2006-10-14 00:00:00
osv
osv
storebackup - several
2006-04-04 00:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.4%
Related for CVE-2005-3148