PT-2005-1011 · Geneweb+1 · Geneweb+1

Tim Dijkstra · Published 2005-04-19 · Updated 2017-07-11 · CVE-2005-0391

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions geneweb versions 4.10 and earlier Debian GNU/Linux (affected versions not specified)

Description The issue concerns improper file permission and content checks during conversion, allowing attackers to modify arbitrary files. Additionally, multiple vulnerabilities in the gwtp package of Debian GNU/Linux can lead to integrity breaches of protected information, with potential remote exploitation.

Recommendations For geneweb versions 4.10 and earlier, update to a version that properly checks file permissions and content during conversion. For Debian GNU/Linux, apply the necessary security updates to address the vulnerabilities in the gwtp package.

Fix

Related Identifiers

BDU:2015-02050

CVE-2005-0391

DSA-712-1

Affected Products

Debian

Geneweb

References · 9

• https://bdu.fstec.ru/vul/2015-02050 · Security Note
• https://osv.dev/vulnerability/CVE-2005-0391 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0391 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-0391 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0391 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0391 · Vendor Advisory
• http://debian.org/security/2005/dsa-712 · Vendor Advisory
• http://debian.org/security/dsa-712 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20176 · Note