CVE-2005-4802 Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on temporary files. NOTE: the raw source referenced an incorrect candidate number; this is the....
MediumCVSS 4.6
EPSS 0.58%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on temporary files. NOTE: the raw source referenced an incorrect candidate number; this is the correct number to use.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flexbackup | <= 1.2.1 | No fix listed |
| debian/flexbackup(Debian:11) | < 1.2.1-3 | 1.2.1-3 |
References
- bugs.debian.org exploit
- 20051017 flexbackup default config insecure temporary file creation mailing-list
- 17209 exploit third-party-advisory vendor-advisory
- 23008 third-party-advisory
- 1015068 exploit vdb-entry
- DSA-1216 vendor-advisory
- www.zataz.net exploit vendor-advisory
- security-tracker.debian.org vendor-advisory