PT-2005-1011 · Geneweb+1 · Geneweb+1

Tim Dijkstra · Publicado 2005-04-19 · Atualizado 2017-07-11 · CVE-2005-0391

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions geneweb versions 4.10 and earlier Debian GNU/Linux (affected versions not specified)

Description The issue concerns improper file permission and content checks during conversion, allowing attackers to modify arbitrary files. Additionally, multiple vulnerabilities in the gwtp package of Debian GNU/Linux can lead to integrity breaches of protected information, with potential remote exploitation.

Recommendations For geneweb versions 4.10 and earlier, update to a version that properly checks file permissions and content during conversion. For Debian GNU/Linux, apply the necessary security updates to address the vulnerabilities in the gwtp package.

Correção

Identificadores relacionados

BDU:2015-02050

CVE-2005-0391

DSA-712-1

Produtos afetados

Debian

Geneweb

Referências · 9

• https://bdu.fstec.ru/vul/2015-02050 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2005-0391 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0391 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2005-0391 · Nota de Segurança
• http://debian.org/security/dsa-712 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0391 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-0391 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20176 · Nota
• http://debian.org/security/2005/dsa-712 · Aviso do Fabricante