CVE-2005-4351

{"id": "CVE-2005-4351", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.1, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-12-31T05:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/openbsd/2005-10/1523.html", "source": "cve@mitre.org"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041177.html", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.redteam-pentesting.de/advisories/rt-sa-2005-015.txt", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.redteam-pentesting.de/advisories/rt-sa-2005-15.txt", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24037", "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/openbsd/2005-10/1523.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041177.html", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.redteam-pentesting.de/advisories/rt-sa-2005-015.txt", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.redteam-pentesting.de/advisories/rt-sa-2005-15.txt", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24037", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dragonfly:dragonfly:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D49632E3-D2DD-4D9A-AE3B-D1A43103DA67", "versionEndIncluding": "1.2"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:*:stable:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C95AA435-BA20-4451-9283-2B62E64B6B40", "versionEndIncluding": "6.0"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:7.0:current:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4E775BA-6DC1-4006-83A4-D30EA57417FC"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7A893C0-1374-4B55-92C9-47CA407B7842", "versionEndIncluding": "2.6.15"}, {"criteria": "cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64487B62-3A07-4294-B8A4-445BFAA0FFAA", "versionEndIncluding": "3.8"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}