CVE-2005-4660 - CERT CVE
ID CVE-2005-4660
Sažetak Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.
Reference
CVSS
Base: 1.2
Impact: 2.9
Exploitability:1.9
Pristup
VektorSloženostAutentikacija
LOCAL HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL NONE
CVSS vektor AV:L/AC:H/Au:N/C:N/I:P/A:N
Zadnje važnije ažuriranje 05-09-2008 - 20:57
Objavljeno 31-12-2005 - 05:00