PT-2005-1225 · Helvis · Helvis

Publicado 2005-01-19 · Atualizado 2008-09-05 · CVE-2005-0118

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions helvis versions 1.8h2 1 and earlier

Description The issue allows local users to read the recovered files of other users because helvis stores recovery files in world-readable directories with world-readable permissions.

Recommendations For helvis versions 1.8h2 1 and earlier, consider changing the permissions of the recovery file directories to restrict access and prevent unauthorized reading of recovered files.

Correção

Identificadores relacionados

CVE-2005-0118

Produtos afetados

Helvis

Referências · 2

• http://vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0118 · Nota de Segurança