PT-2005-1921 · Openmosix · Openmosixview

Gangstuck + 1 · Published 2005-03-29 · Updated 2016-10-18 · CVE-2005-0894

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenMosixView version 1.5

Description The issue allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files in the openmosixcollector directory or nodes.tmp.

Recommendations For OpenMosixView version 1.5, consider restricting access to the openmosixcollector directory and nodes.tmp file to prevent local users from performing symlink attacks. As a temporary workaround, consider implementing strict file system permissions to limit the ability of local users to overwrite or delete arbitrary files.

Fix

Related Identifiers

CVE-2005-0894

Affected Products

Openmosixview

References · 4

• http://securityfocus.com/bid/12902 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-0894 · Security Note
• http://secunia.com/advisories/14693 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=111176899423078&w=2 · Note