CVE-2005-4660

Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ipcop:ipcop:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.8:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.9:*:*:*:*:*:*:*

History

No history.

Information

Published : 2005-12-31 05:00

Updated : 2024-02-04 16:52


NVD link : CVE-2005-4660

Mitre link : CVE-2005-4660

CVE.ORG link : CVE-2005-4660


JSON object : View

Products Affected

ipcop

  • ipcop