CVE-2005-4660

Published: Dec 31, 2005Modified: Apr 16, 2026

1.2

Vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 1.9 / Impact: 2.9

Source: NVD

Description

Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.

Affected (7)

Products: Ipcop: Ipcop

Ipcop

1 product

Ipcop

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ipcop Ipcop	Version 1.4.1
Ipcop Ipcop	Version 1.4.2
Ipcop Ipcop	Version 1.4.4
Ipcop Ipcop	Version 1.4.5
Ipcop Ipcop	Version 1.4.6
Ipcop Ipcop	Version 1.4.8
Ipcop Ipcop	Version 1.4.9

References (6)

http://secunia.com/advisories/17513/

Source: cve@mitre.org

Patch

http://sourceforge.net/tracker/index.php?func=detail&aid=1344047&group_id=40604&atid=428516

Source: cve@mitre.org

http://www.securityfocus.com/bid/15378

Source: cve@mitre.org

http://secunia.com/advisories/17513/

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://sourceforge.net/tracker/index.php?func=detail&aid=1344047&group_id=40604&atid=428516

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15378

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.