PT-2005-5435 · Suse · Suse Linux

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4772

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SUSE Linux versions prior to 20051007

Description The issue allows local users to potentially read or modify sensitive files due to the preservation of permissions and ownerships when copying a remote repository. This could give local users the ability to exploit the issue.

Recommendations For versions prior to 20051007, update to a version released after 20051007 to resolve the issue.

Fix

Related Identifiers

CVE-2005-4772

Affected Products

Suse Linux

References · 3

• http://novell.com/linux/security/advisories/2005_22_sr.html · Vendor Advisory
• http://securityfocus.com/bid/15026 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-4772 · Security Note