PT-2005-1088 · Smb4K · Smb4K

Publicado 2005-09-08 · Atualizado 2008-09-05 · CVE-2005-2851

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions smb4k versions prior to 0.6.3

Description The issue allows local users to read sensitive files via a symlink attack on temporary files. This can lead to a breach of confidentiality of protected information. The exploitation of this issue can be carried out locally.

Recommendations For versions prior to 0.6.3, update to version 0.6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and temporary directories to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-09478

CVE-2005-2851

DTSA-25-1

Produtos afetados

Smb4K

Referências · 12

• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2851 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200511-15.xml · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200511-15.xml · Nota
• https://osv.dev/vulnerability/CVE-2005-2851 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09478 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2005-2851 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2851 · Nota de Segurança
• http://smb4k.berlios.de · Correção
• http://mandriva.com/security/advisories?name=MDKSA-2005:157 · Aviso do Fabricante
• http://secunia.com/advisories/16724 · Nota
• http://secunia.com/advisories/17636 · Nota
• http://securityfocus.com/bid/14756 · Correção