CVE-2005-2960

Published: Oct 5, 2005Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.

Affected (41)

Products: Gnu: Cfengine · Debian: Debian Linux

1 product

1 product

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Gnu Cfengine	Version 1.5.3-4
Gnu Cfengine	Version 1.5
Gnu Cfengine	Version 1.6.5
Gnu Cfengine	Version 1.6 a10
Gnu Cfengine	Version 1.6 a11
Gnu Cfengine	Version 2.0.0
Gnu Cfengine	Version 2.0.1
Gnu Cfengine	Version 2.0.2
Gnu Cfengine	Version 2.0.3
Gnu Cfengine	Version 2.0.4
Gnu Cfengine	Version 2.0.5
Gnu Cfengine	Version 2.0.5 b1
Gnu Cfengine	Version 2.0.5 pre2
Gnu Cfengine	Version 2.0.5 pre
Gnu Cfengine	Version 2.0.6
Gnu Cfengine	Version 2.0.7
Gnu Cfengine	Version 2.0.7 p1
Gnu Cfengine	Version 2.0.7 p2
Gnu Cfengine	Version 2.0.7 p3
Gnu Cfengine	Version 2.0.8
Gnu Cfengine	Version 2.0.8 p1
Gnu Cfengine	Version 2.1.0 a6
Gnu Cfengine	Version 2.1.0 a8
Gnu Cfengine	Version 2.1.0 a9
Gnu Cfengine	Version 2.1.16
Gnu Cfengine	Version 2.1.7 p1
Gnu Cfengine	Version 2.1.8
Gnu Cfengine	Version 2.1.9

Configuration B

13 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 3.1

References (30)

http://bugs.gentoo.org/show_bug.cgi?id=107871

Source: security@debian.org

Vendor Advisory

http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0

Source: security@debian.org

PatchVendor Advisory

http://secunia.com/advisories/17037/

Source: security@debian.org

Vendor Advisory

http://secunia.com/advisories/17038

Source: security@debian.org

http://secunia.com/advisories/17040

Source: security@debian.org

http://secunia.com/advisories/17142

Source: security@debian.org

http://secunia.com/advisories/17182

Source: security@debian.org

http://secunia.com/advisories/17215

Source: security@debian.org

http://www.debian.org/security/2005/dsa-835

Source: security@debian.org

Patch

http://www.debian.org/security/2005/dsa-836

Source: security@debian.org

Patch

http://www.mandriva.com/security/advisories?name=MDKSA-2005:184

Source: security@debian.org

http://www.novell.com/linux/security/advisories/2005_23_sr.html

Source: security@debian.org

http://www.securityfocus.com/bid/14994

Source: security@debian.org

http://www.ubuntu.com/usn/usn-198-1

Source: security@debian.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22489

Source: security@debian.org

http://bugs.gentoo.org/show_bug.cgi?id=107871

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/17037/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/17038

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17040

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17142

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17182

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17215

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-835

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2005/dsa-836

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.mandriva.com/security/advisories?name=MDKSA-2005:184

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2005_23_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14994

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-198-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/22489

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.