PT-2005-1225 · Helvis · Helvis

Published 2005-01-19 · Updated 2008-09-05 · CVE-2005-0118

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions helvis versions 1.8h2 1 and earlier

Description The issue allows local users to read the recovered files of other users because helvis stores recovery files in world-readable directories with world-readable permissions.

Recommendations For helvis versions 1.8h2 1 and earlier, consider changing the permissions of the recovery file directories to restrict access and prevent unauthorized reading of recovered files.

Fix

Related Identifiers

CVE-2005-0118

Affected Products

Helvis

References · 2

• http://vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0118 · Security Note