PT-2005-1081 · Sysreport+1 · Sysreport+1

Bill Stearns + 1 · Published 2005-08-09 · Updated 2017-10-11 · CVE-2005-2104

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions sysreport versions prior to 1.3.7

Description The issue allows local users to obtain sensitive information via a symlink attack on a temporary directory. Exploitation of this issue may lead to a violation of confidentiality, integrity, and availability of protected information. It is mentioned that exploitation can be carried out remotely.

Recommendations For versions prior to 1.3.7, update to version 1.3.7 or later to resolve the issue. As a temporary workaround, consider restricting access to temporary directories to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-07610

BDU:2015-07611

BDU:2015-07612

CVE-2005-2104

RHSA-2005:598

RHSA-2005_598

Affected Products

Red Hat

Sysreport

References · 17

• http://secunia.com/advisories/16381 · Patch
• https://bdu.fstec.ru/vul/2015-07612 · Security Note
• https://bdu.fstec.ru/vul/2015-07610 · Security Note
• http://securitytracker.com/id?1014653 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-598.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07611 · Security Note
• http://redhat.com/archives/fedora-announce-list/2005-November/msg00034.html · Vendor Advisory
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162978 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2104 · Security Note
• http://redhat.com/archives/fedora-announce-list/2005-November/msg00035.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2005-598.html · Note
• http://securityfocus.com/bid/15379 · Note
• http://osvdb.org/18682 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9411 · Note
• http://secunia.com/advisories/17539 · Note