CVE-2005-2214 : apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissio

apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.

Published 2005-07-11 04:00:00

Updated 2008-09-05 20:51:11

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2005-2214

Debian » Apt-setup
cpe:2.3:a:debian:apt-setup:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2005-2214

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2005-2214

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2005-2214

http://www.securityfocus.com/bid/14173
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305142

#305142 - apt-setup creates a world readable apt.conf file - Debian Bug report logs
Vendor Advisory

Jump to

Vulnerability Details : CVE-2005-2214

Products affected by CVE-2005-2214

Exploit prediction scoring system (EPSS) score for CVE-2005-2214

CVSS scores for CVE-2005-2214

References for CVE-2005-2214