CVE-2005-1740 fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files v...
HighCVSS 10.0
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| net-snmp | = 5.0.1 | No fix listed |
| net-snmp | = 5.0.3 | No fix listed |
| net-snmp | = 5.0.4_pre2 | No fix listed |
| net-snmp | = 5.0.5 | No fix listed |
| net-snmp | = 5.0.6 | No fix listed |
| net-snmp | = 5.0.7 | No fix listed |
| net-snmp | = 5.0.8 | No fix listed |
| net-snmp | = 5.0.9 | No fix listed |
| net-snmp | = 5.1.2 | No fix listed |
References
- 15471 third-party-advisory
- 16999 third-party-advisory
- 17135 third-party-advisory
- 18635 third-party-advisory
- GLSA-200505-18 vendor-advisory
- 1014039 vdb-entry
- MDKSA-2006:025 vendor-advisory
- 16778 vdb-entry
- RHSA-2005:373 vendor-advisory
- RHSA-2005:395 vendor-advisory
- 13715 vdb-entry
- ADV-2005-0598 vdb-entry
- www.zataz.net
- oval:org.mitre.oval:def:11659 signature vdb-entry
- Debian Security Tracker CVE-2005-1740 vendor-advisory