Published: 31/12/2005 Updated: 18/10/2016

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Flexbackup 1.2.1 and previous versions allows local users to overwrite files and execute code via a symlink attack on temporary files. NOTE: the raw source referenced an incorrect candidate number; this is the correct number to use.

Vulnerable Product	Search on Vulmon	Subscribe to Product
flexbackup flexbackup

Eric Romang discovered that the flexbackup backup tool creates temporary files in an insecure manner, which allows denial of service through a symlink attack For the stable distribution (sarge) this problem has been fixed in version 121-2sarge1 For the upcoming stable distribution (etch) this problem has been fixed in version 121-3 For the u ...

NVD-CWE-Other http://www.zataz.net/adviso/flexbackup-09192005.txt http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334350 http://securitytracker.com/id?1015068 http://secunia.com/advisories/17209 http://www.debian.org/security/2006/dsa-1216 http://secunia.com/advisories/23008 http://marc.info/?l=bugtraq&m=112958392512513&w=2 https://www.debian.org/security/./dsa-1216 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-4802

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect