CVE-2005-0071 vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vdr | = 1.0.0 | No fix listed |
| vdr | = 1.0.4 | No fix listed |
| vdr | = 1.2.0 | No fix listed |
| vdr | = 1.2.1 | No fix listed |
| vdr | = 1.2.2 | No fix listed |
| vdr | = 1.2.5 | No fix listed |
| debian/vdr(Debian:12) | < 1.2.6-6 | 1.2.6-6 |
| debian/vdr(Debian:13) | < 1.2.6-6 | 1.2.6-6 |
| debian/vdr(Debian:14) | < 1.2.6-6 | 1.2.6-6 |
References
- 13930 third-party-advisory
- 13995 third-party-advisory
- 14066 third-party-advisory
- DSA-656 vendor-advisory
- GLSA-200501-42 vendor-advisory
- 12356 vdb-entry
- vdr-dvdapi-file-overwrite(19066) vdb-entry
- Debian Security Tracker CVE-2005-0071 vendor-advisory