PT-2005-1226 · Helvis · Helvis

Publicado 2005-01-19 · Atualizado 2008-09-05 · CVE-2005-0119

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions helvis versions 1.8h2 1 and earlier

Description The issue allows local users to recover and read the files of other users via the elvrec setuid program.

Recommendations For helvis versions 1.8h2 1 and earlier, consider removing the setuid bit from the elvrec program to prevent unauthorized access until a patch is available.

Correção

Identificadores relacionados

CVE-2005-0119

Produtos afetados

Helvis

Referências · 2

• http://vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0119 · Nota de Segurança