CVE-2005-4772 liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitiv...
MediumCVSS 6.4
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| suse linux openexchange server | = 4.0 | No fix listed |
| suse linux school server | = gold | No fix listed |
| suse linux standard server | = 8.0 | No fix listed |
| suse sled beagle | = 10.0 | No fix listed |
| suse linux | = 1.0 | No fix listed |
| suse linux | = 8 | No fix listed |
| suse linux | = 8.0 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
| suse linux | = 9.2 | No fix listed |
| suse linux | = 9.3 | No fix listed |
| suse linux | = 10.0 | No fix listed |
References
- SUSE-SR:2005:022 patch vendor-advisory
- 15026 patch vdb-entry