CVE-2005-1064

Published: Apr 10, 2005Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files.

Affected (9)

Products: Rsnapshot: Filesystem Snapshot Utility

Rsnapshot

1 product

Filesystem Snapshot Utility

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Rsnapshot Filesystem Snapshot Utility	Version 1.0.10
Rsnapshot Filesystem Snapshot Utility	Version 1.1.1
Rsnapshot Filesystem Snapshot Utility	Version 1.1.2
Rsnapshot Filesystem Snapshot Utility	Version 1.1.3
Rsnapshot Filesystem Snapshot Utility	Version 1.1.4
Rsnapshot Filesystem Snapshot Utility	Version 1.1.5
Rsnapshot Filesystem Snapshot Utility	Version 1.1.6
Rsnapshot Filesystem Snapshot Utility	Version 1.1
Rsnapshot Filesystem Snapshot Utility	Version 1.2