Vulnerability Details : CVE-2005-3148
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership.
Products affected by CVE-2005-3148
- cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.12:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.12.1:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.12.2:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.13:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.15:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.16.1:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.18.2:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.18.4:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.8:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.9:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.16.2:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.17:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.18:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.18.1:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.10:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.11:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.14:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.16:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.18.3:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:storebackup:storebackup:1.9.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2005-3148
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 26 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2005-3148
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST |
References for CVE-2005-3148
-
http://sourceforge.net/project/shownotes.php?release_id=352676
Page not found - SourceForge.netPatch;Vendor Advisory
-
http://www.securityfocus.com/advisories/9384
Vendor Advisory
-
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434
#332434 - storebackup: Several security problems (already fixed in sid/testing) - Debian Bug report logs
-
http://www.us.debian.org/security/2006/dsa-1022
Jump to