The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files.
References
Link | Resource |
---|---|
http://secunia.com/advisories/14495 | Patch Vendor Advisory |
http://www.debian.org/security/2005/dsa-691 | Patch Vendor Advisory |
http://www.osvdb.org/14610 | |
http://secunia.com/advisories/14495 | Patch Vendor Advisory |
http://www.debian.org/security/2005/dsa-691 | Patch Vendor Advisory |
http://www.osvdb.org/14610 |
Configurations
History
20 Nov 2024, 23:54
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/14495 - Patch, Vendor Advisory | |
References | () http://www.debian.org/security/2005/dsa-691 - Patch, Vendor Advisory | |
References | () http://www.osvdb.org/14610 - |
Information
Published : 2005-03-08 05:00
Updated : 2024-11-20 23:54
NVD link : CVE-2005-0099
Mitre link : CVE-2005-0099
CVE.ORG link : CVE-2005-0099
JSON object : View
Products Affected
abuse
- abuse-sdl
CWE