CVE-2005-3147 StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.
LowCVSS 2.1
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| storebackup | = 1.1 | No fix listed |
| storebackup | = 1.2 | No fix listed |
| storebackup | = 1.3 | No fix listed |
| storebackup | = 1.4 | No fix listed |
| storebackup | = 1.5 | No fix listed |
| storebackup | = 1.6 | No fix listed |
| storebackup | = 1.7 | No fix listed |
| storebackup | = 1.8 | No fix listed |
| storebackup | = 1.8.1 | No fix listed |
| storebackup | = 1.9 | No fix listed |
| storebackup | = 1.9.1 | No fix listed |
| storebackup | = 1.10 | No fix listed |
| storebackup | = 1.10.1 | No fix listed |
| storebackup | = 1.11 | No fix listed |
| storebackup | = 1.12 | No fix listed |
| storebackup | = 1.12.1 | No fix listed |
| storebackup | = 1.12.2 | No fix listed |
| storebackup | = 1.13 | No fix listed |
| storebackup | = 1.14 | No fix listed |
| storebackup | = 1.15 | No fix listed |
| storebackup | = 1.16 | No fix listed |
| storebackup | = 1.16.1 | No fix listed |
| storebackup | = 1.16.2 | No fix listed |
| storebackup | = 1.17 | No fix listed |
| storebackup | = 1.18 | No fix listed |
Show 8 more
| Product | Affected versions | Fixed in |
|---|---|---|
| storebackup | = 1.18.1 | No fix listed |
| storebackup | = 1.18.2 | No fix listed |
| storebackup | = 1.18.3 | No fix listed |
| storebackup | = 1.18.4 | No fix listed |
| suse linux | All versions | No fix listed |
| debian/storebackup(Debian:12) | < 1.19-1 | 1.19-1 |
| debian/storebackup(Debian:13) | < 1.19-1 | 1.19-1 |
| debian/storebackup(Debian:14) | < 1.19-1 | 1.19-1 |
References
- bugs.debian.org
- 17025 third-party-advisory
- 19489 third-party-advisory
- sourceforge.net patch
- SUSE-SR:2005:021 vendor-advisory
- DSA-1022 vendor-advisory
- Debian Security Tracker CVE-2005-3147 vendor-advisory
- bugs.debian.org issue-tracking