CVE-2005-0391 geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files.
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| daniel de rauglaudre geneweb | <= 4.10 | No fix listed |
| debian/geneweb(Debian:11) | < 4.10-7 | 4.10-7 |
References
- DSA-712 patch vendor-advisory
- geneweb-insecure-file-permission(20176) vdb-entry
- security-tracker.debian.org vendor-advisory