CVE-2005-2960
published 2005-10-05CVE-2005-2960: cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability…
PriorityP410low2.1CVSS 2.0
AVLACLAuNCNIPAN
EPSS
0.43%
34.5th percentile
cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
| gnu | cfengine | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
cfengine vulnerabilities
vendor_ubuntu·2005-10-10
CVE-2005-2960 cfengine vulnerabilities
Title: cfengine vulnerabilities
Summary: cfengine vulnerabilities
Javier Fernández-Sanguino Peña discovered that several tools in the
cfengine package (vicf, cfmailfilter, and cfcron) create and use
temporary files in an insecure way. A local attacker could exploit
this with a symlink attack to create or overwrite arbitrary files with
the privileges of the user running the cfengine program.
Instructions: In general, a standard system update will make all the necessary changes.
GHSA
GHSA-hfq5-xp8f-5693: The (1) cfmailfilter and (2) cfcron
ghsa_unreviewed·2022-05-01·CVSS 2.1
CVE-2005-3137 [LOW] GHSA-hfq5-xp8f-5693: The (1) cfmailfilter and (2) cfcron
The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2005-2960.
GHSA
GHSA-wgqp-qmfp-f6mf: cfengine 1
ghsa_unreviewed·2022-05-01·CVSS 2.1
CVE-2005-2960 [LOW] GHSA-wgqp-qmfp-f6mf: cfengine 1
cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.
No detection rules found.
No public exploits indexed.
http://bugs.gentoo.org/show_bug.cgi?id=107871http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0http://secunia.com/advisories/17037/http://secunia.com/advisories/17038http://secunia.com/advisories/17040http://secunia.com/advisories/17142http://secunia.com/advisories/17182http://secunia.com/advisories/17215http://www.debian.org/security/2005/dsa-835http://www.debian.org/security/2005/dsa-836http://www.mandriva.com/security/advisories?name=MDKSA-2005:184http://www.novell.com/linux/security/advisories/2005_23_sr.htmlhttp://www.securityfocus.com/bid/14994http://www.ubuntu.com/usn/usn-198-1https://exchange.xforce.ibmcloud.com/vulnerabilities/22489http://bugs.gentoo.org/show_bug.cgi?id=107871http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0http://secunia.com/advisories/17037/http://secunia.com/advisories/17038http://secunia.com/advisories/17040http://secunia.com/advisories/17142http://secunia.com/advisories/17182http://secunia.com/advisories/17215http://www.debian.org/security/2005/dsa-835http://www.debian.org/security/2005/dsa-836http://www.mandriva.com/security/advisories?name=MDKSA-2005:184http://www.novell.com/linux/security/advisories/2005_23_sr.htmlhttp://www.securityfocus.com/bid/14994http://www.ubuntu.com/usn/usn-198-1https://exchange.xforce.ibmcloud.com/vulnerabilities/22489
2005-10-05
Published