← Back

CVE-2005-0610

nvd nist
Published: Apr 12, 2005Modified: Apr 16, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.

Affected (63)

Products: Freebsd: Freebsd
1 product
Freebsd
Configuration A
63 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Version 4.0
Version 4.0 alpha
Version 4.0 releng
Version 4.1.1
Version 4.1.1 release
Version 4.1.1 stable
Version 4.10
Version 4.10 release
Version 4.10 releng
Version 4.11 stable
Version 4.1
Version 4.2
Version 4.2 stable
Version 4.3
Version 4.3 release
Version 4.3 release_p38
Version 4.3 releng
Version 4.3 stable
Version 4.4
Version 4.4 release_p42
Version 4.4 releng
Version 4.4 stable
Version 4.5
Version 4.5 release
Version 4.5 release_p32
Version 4.5 releng
Version 4.5 stable
Version 4.6.2
Version 4.6
Version 4.6 release
Version 4.6 release_p20
Version 4.6 releng
Version 4.6 stable
Version 4.7
Version 4.7 release
Version 4.7 release_p17
Version 4.7 releng
Version 4.7 stable
Version 4.8
Version 4.8 pre-release
Version 4.8 release_p6
Version 4.8 releng
Version 4.9
Version 4.9 pre-release
Version 4.9 releng
Version 5.0
Version 5.0 alpha
Version 5.0 release_p14
Version 5.0 releng
Version 5.1
Version 5.1 alpha
Version 5.1 release
Version 5.1 release_p5
Version 5.1 releng
Version 5.2.1 release
Version 5.2.1 releng
Version 5.2
Version 5.3
Version 5.3 release
Version 5.3 releng
Version 5.3 stable
Version 5.4 pre-release
Version 5.4 release

References (6)

Source: secteam@freebsd.org
PatchVendor Advisory
Source: secteam@freebsd.org
Vendor Advisory
Source: secteam@freebsd.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.