CVE Vulnerabilities

CVE-2005-0610

Published: Apr 12, 2005 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.

Affected Software

Name Vendor Start Version End Version
Freebsd Freebsd 4.0 (including) 4.0 (including)
Freebsd Freebsd 4.0-alpha (including) 4.0-alpha (including)
Freebsd Freebsd 4.0-releng (including) 4.0-releng (including)
Freebsd Freebsd 4.1 (including) 4.1 (including)
Freebsd Freebsd 4.1.1 (including) 4.1.1 (including)
Freebsd Freebsd 4.1.1-release (including) 4.1.1-release (including)
Freebsd Freebsd 4.1.1-stable (including) 4.1.1-stable (including)
Freebsd Freebsd 4.2 (including) 4.2 (including)
Freebsd Freebsd 4.2-stable (including) 4.2-stable (including)
Freebsd Freebsd 4.3 (including) 4.3 (including)
Freebsd Freebsd 4.3-release (including) 4.3-release (including)
Freebsd Freebsd 4.3-release_p38 (including) 4.3-release_p38 (including)
Freebsd Freebsd 4.3-releng (including) 4.3-releng (including)
Freebsd Freebsd 4.3-stable (including) 4.3-stable (including)
Freebsd Freebsd 4.4 (including) 4.4 (including)
Freebsd Freebsd 4.4-release_p42 (including) 4.4-release_p42 (including)
Freebsd Freebsd 4.4-releng (including) 4.4-releng (including)
Freebsd Freebsd 4.4-stable (including) 4.4-stable (including)
Freebsd Freebsd 4.5 (including) 4.5 (including)
Freebsd Freebsd 4.5-release (including) 4.5-release (including)
Freebsd Freebsd 4.5-release_p32 (including) 4.5-release_p32 (including)
Freebsd Freebsd 4.5-releng (including) 4.5-releng (including)
Freebsd Freebsd 4.5-stable (including) 4.5-stable (including)
Freebsd Freebsd 4.6 (including) 4.6 (including)
Freebsd Freebsd 4.6-release (including) 4.6-release (including)
Freebsd Freebsd 4.6-release_p20 (including) 4.6-release_p20 (including)
Freebsd Freebsd 4.6-releng (including) 4.6-releng (including)
Freebsd Freebsd 4.6-stable (including) 4.6-stable (including)
Freebsd Freebsd 4.6.2 (including) 4.6.2 (including)
Freebsd Freebsd 4.7 (including) 4.7 (including)
Freebsd Freebsd 4.7-release (including) 4.7-release (including)
Freebsd Freebsd 4.7-release_p17 (including) 4.7-release_p17 (including)
Freebsd Freebsd 4.7-releng (including) 4.7-releng (including)
Freebsd Freebsd 4.7-stable (including) 4.7-stable (including)
Freebsd Freebsd 4.8 (including) 4.8 (including)
Freebsd Freebsd 4.8-pre-release (including) 4.8-pre-release (including)
Freebsd Freebsd 4.8-release_p6 (including) 4.8-release_p6 (including)
Freebsd Freebsd 4.8-releng (including) 4.8-releng (including)
Freebsd Freebsd 4.9 (including) 4.9 (including)
Freebsd Freebsd 4.9-pre-release (including) 4.9-pre-release (including)
Freebsd Freebsd 4.9-releng (including) 4.9-releng (including)
Freebsd Freebsd 4.10 (including) 4.10 (including)
Freebsd Freebsd 4.10-release (including) 4.10-release (including)
Freebsd Freebsd 4.10-releng (including) 4.10-releng (including)
Freebsd Freebsd 4.11-stable (including) 4.11-stable (including)
Freebsd Freebsd 5.0 (including) 5.0 (including)
Freebsd Freebsd 5.0-alpha (including) 5.0-alpha (including)
Freebsd Freebsd 5.0-release_p14 (including) 5.0-release_p14 (including)
Freebsd Freebsd 5.0-releng (including) 5.0-releng (including)
Freebsd Freebsd 5.1 (including) 5.1 (including)
Freebsd Freebsd 5.1-alpha (including) 5.1-alpha (including)
Freebsd Freebsd 5.1-release (including) 5.1-release (including)
Freebsd Freebsd 5.1-release_p5 (including) 5.1-release_p5 (including)
Freebsd Freebsd 5.1-releng (including) 5.1-releng (including)
Freebsd Freebsd 5.2 (including) 5.2 (including)
Freebsd Freebsd 5.2.1-release (including) 5.2.1-release (including)
Freebsd Freebsd 5.2.1-releng (including) 5.2.1-releng (including)
Freebsd Freebsd 5.3 (including) 5.3 (including)
Freebsd Freebsd 5.3-release (including) 5.3-release (including)
Freebsd Freebsd 5.3-releng (including) 5.3-releng (including)
Freebsd Freebsd 5.3-stable (including) 5.3-stable (including)
Freebsd Freebsd 5.4-pre-release (including) 5.4-pre-release (including)
Freebsd Freebsd 5.4-release (including) 5.4-release (including)

References