PT-2005-1226 · Helvis · Helvis

Published 2005-01-19 · Updated 2008-09-05 · CVE-2005-0119

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions helvis versions 1.8h2 1 and earlier

Description The issue allows local users to recover and read the files of other users via the elvrec setuid program.

Recommendations For helvis versions 1.8h2 1 and earlier, consider removing the setuid bit from the elvrec program to prevent unauthorized access until a patch is available.

Fix

Related Identifiers

CVE-2005-0119

Affected Products

Helvis

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-0119 · Security Note
• http://vuxml.org/freebsd/bb99f803-5fde-11d9-b721-00065be4b5b6.html · Note