PT-2005-1043 · Zhcon · Zhcon

Erik Sjölund · Publicado 2005-01-24 · Atualizado 2017-07-11 · CVE-2005-0072

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions zhcon versions prior to 0.2

Description The issue allows local users to read arbitrary files due to the software not dropping privileges before reading a user configuration file. This can lead to a breach of confidentiality of protected information. The exploitation of this issue can be carried out by a local attacker.

Recommendations For versions prior to 0.2, update to version 0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files that could be read through this issue until the update is applied.

Exploit

Correção

Identificadores relacionados

BDU:2015-03329

CVE-2005-0072

DSA-655-1

Produtos afetados

Zhcon

Referências · 15

• 🔥 http://debian.org/security/2005/dsa-655 · Exploit
• http://mandriva.com/security/advisories?name=MDKSA-2005:012 · Aviso do Fabricante
• http://securitytracker.com/id?1012977 · Nota
• http://secunia.com/advisories/13982 · Nota
• https://security-tracker.debian.org/tracker/CVE-2005-0072 · Aviso do Fabricante
• http://securityfocus.com/bid/12343 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19045 · Nota
• https://osv.dev/vulnerability/CVE-2005-0072 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-03329 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0072 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0072 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0072 · Nota de Segurança
• http://debian.org/security/dsa-655 · Nota
• http://secunia.com/advisories/13977 · Nota
• http://secunia.com/advisories/13987 · Nota