Lucene search
HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1167
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.7
Confidence
Low
EPSS
0.004
Percentile
72.3%
mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names, which allows remote attackers to overwrite arbitrary files via a symlink attack.
Affected configurations
Node
gentoomirrorselectMatch0.80
ORgentoomirrorselectMatch0.81
ORgentoomirrorselectMatch0.82
ORgentoomirrorselectMatch0.83
ORgentoomirrorselectMatch0.84
ORgentoomirrorselectMatch0.85
ORgentoomirrorselectMatch0.86
ORgentoomirrorselectMatch0.87
ORgentoomirrorselectMatch0.88
| Vendor | Product | Version | CPE |
|---|---|---|---|
| gentoo | mirrorselect | 0.80 | cpe:2.3:a:gentoo:mirrorselect:0.80:*:*:*:*:*:*:* |
| gentoo | mirrorselect | 0.81 | cpe:2.3:a:gentoo:mirrorselect:0.81:*:*:*:*:*:*:* |
| gentoo | mirrorselect | 0.82 | cpe:2.3:a:gentoo:mirrorselect:0.82:*:*:*:*:*:*:* |
| gentoo | mirrorselect | 0.83 | cpe:2.3:a:gentoo:mirrorselect:0.83:*:*:*:*:*:*:* |
| gentoo | mirrorselect | 0.84 | cpe:2.3:a:gentoo:mirrorselect:0.84:*:*:*:*:*:*:* |
| gentoo | mirrorselect | 0.85 | cpe:2.3:a:gentoo:mirrorselect:0.85:*:*:*:*:*:*:* |
| gentoo | mirrorselect | 0.86 | cpe:2.3:a:gentoo:mirrorselect:0.86:*:*:*:*:*:*:* |
| gentoo | mirrorselect | 0.87 | cpe:2.3:a:gentoo:mirrorselect:0.87:*:*:*:*:*:*:* |
| gentoo | mirrorselect | 0.88 | cpe:2.3:a:gentoo:mirrorselect:0.88:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2004-1167
2005-01-10 05:00:00
cvelist
cvelist
CVE-2004-1167
2004-12-10 05:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200412-05 (mirrorselect)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200412-05 (mirrorselect)
2008-09-24 00:00:00
gentoo
gentoo
mirrorselect: Insecure temporary file creation
2004-12-07 00:00:00
nessus
nessus
GLSA-200412-05 : mirrorselect: Insecure temporary file creation
2004-12-07 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.7
Confidence
Low
EPSS
0.004
Percentile
72.3%
Related for NVD:CVE-2004-1167