CVE-2005-0457

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-0457
Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious libraries into the PORTAGE_TMPDIR (portage) temporary directory.

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://bugs.gentoo.org/show_bug.cgi?id=81747 Third Party Advisory Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml Patch Third Party Advisory Vendor Advisory
http://bugs.gentoo.org/show_bug.cgi?id=81747 Third Party Advisory Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml Patch Third Party Advisory Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
History

20 Nov 2024, 23:55

Type Values Removed Values Added
References () http://bugs.gentoo.org/show_bug.cgi?id=81747 - Third Party Advisory, Vendor Advisory () http://bugs.gentoo.org/show_bug.cgi?id=81747 - Third Party Advisory, Vendor Advisory
References () http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - Patch, Third Party Advisory, Vendor Advisory () http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - Patch, Third Party Advisory, Vendor Advisory

28 Feb 2022, 18:51

Type Values Removed Values Added
CPE cpe:2.3:a:opera_software:opera_web_browser:7.53:*:*:*:*:*:*:*
cpe:2.3:a:opera_software:opera_web_browser:7.50b1:*:*:*:*:*:*:*
cpe:2.3:a:opera_software:opera_web_browser:7.50:*:*:*:*:*:*:*
cpe:2.3:a:opera_software:opera_web_browser:7.52:*:*:*:*:*:*:*
cpe:2.3:a:opera_software:opera_web_browser:7.54:*:*:*:*:*:*:*		 cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*
References (GENTOO) http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - Patch, Vendor Advisory (GENTOO) http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml - Patch, Third Party Advisory, Vendor Advisory
References (CONFIRM) http://bugs.gentoo.org/show_bug.cgi?id=81747 - Vendor Advisory (CONFIRM) http://bugs.gentoo.org/show_bug.cgi?id=81747 - Third Party Advisory, Vendor Advisory
CWE NVD-CWE-Other CWE-427
Information

Published : 2005-05-02 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2005-0457

Mitre link : CVE-2005-0457

CVE.ORG link : CVE-2005-0457

JSON object : View

Products Affected

opera

  • opera_browser
CWE
CWE-427

Uncontrolled Search Path Element