PT-2005-5598 · Debian · Cfengine

Javier Fernández-Sanguino Peña · Published 1970-01-01 · Updated 2017-07-11 · CVE-2005-3137

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions cfengine version 1.6.5

Description The issue concerns multiple vulnerabilities in the cfengine package of the Debian GNU/Linux operating system, which can be exploited by a local attacker to compromise the integrity of protected information. Specifically, the cfmailfilter and cfcron.in files for cfengine 1.6.5 are vulnerable to a symlink attack on temporary files, allowing local users to overwrite arbitrary files.

Recommendations For version 1.6.5, consider restricting access to the cfmailfilter and cfcron.in files to prevent local users from exploiting the vulnerability. As a temporary workaround, consider disabling the cfmailfilter and cfcron.in files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03294

BDU:2015-03295

BDU:2015-03296

BDU:2015-03297

CVE-2005-3137

DSA-835-1

DSA-836-1

Affected Products

Cfengine

References · 22

• http://mandriva.com/security/advisories?name=MDKSA-2005:184 · Vendor Advisory
• http://ubuntu.com/usn/usn-198-1 · Vendor Advisory
• http://debian.org/security/2005/dsa-836 · Vendor Advisory
• http://debian.org/security/2005/dsa-835 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3137 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3137 · Security Note
• https://bdu.fstec.ru/vul/2015-03297 · Security Note
• https://bdu.fstec.ru/vul/2015-03294 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2960 · Security Note
• https://bdu.fstec.ru/vul/2015-03296 · Security Note
• http://secunia.com/advisories/17037 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03295 · Security Note
• http://debian.org/security/dsa-835 · Note
• http://bugs.gentoo.org/show_bug.cgi?id=107871 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22489 · Note