CVE-2005-3254 : The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether

The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute code as other system UIDs that are greater than the minimum value, which should be 1000 on Debian systems.

Published 2005-10-18 21:02:00

Updated 2008-09-05 20:53:52

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Exploit prediction scoring system (EPSS) score for CVE-2005-3254

EPSS FAQ

0.26%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 65 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2005-3254

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

Products affected by CVE-2005-3254

Nathan Neulinger » Cgiwrap » Version: 2.0 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:2.0:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 2.1 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:2.1:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 2.2 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:2.2:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 2.3 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:2.3:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.4 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.4:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.5 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.5:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.6.1 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.1:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.6.2 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.2:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.0 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.0:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 2.5 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:2.5:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 2.7 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:2.7:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.23 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.23:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.3 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.3:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.6.3 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.3:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.6.5 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.5:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.1 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.1:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.11 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.11:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.2 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.2:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.21 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.21:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.7.1 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.7.1:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.7 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.7:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.8 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.8:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 1.0 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:1.0:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 2.4 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:2.4:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 2.6 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:2.6:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.22 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.22:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.24 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.24:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.6.4 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.6.4:*:debian_gnu_linux:*:*:*:*:*
Matching versions
Nathan Neulinger » Cgiwrap » Version: 3.6 Debian Gnu Linux Edition
cpe:2.3:a:nathan_neulinger:cgiwrap:3.6:*:debian_gnu_linux:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2005-3254

Exploit prediction scoring system (EPSS) score for CVE-2005-3254

CVSS scores for CVE-2005-3254

References for CVE-2005-3254

Products affected by CVE-2005-3254