CVE Vulnerabilities

CVE-2009-5054

Published: Feb 03, 2011 | Modified: Feb 15, 2011
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Smarty before 3.0.0 beta 4 does not consider the umask value when setting the permissions of files, which might allow attackers to bypass intended access restrictions via standard filesystem operations.

Affected Software

Name Vendor Start Version End Version
Smarty Smarty 1.4.3 1.4.3
Smarty Smarty 1.0 1.0
Smarty Smarty 1.0b 1.0b
Smarty Smarty 2.3.1 2.3.1
Smarty Smarty 2.6.0 2.6.0
Smarty Smarty 2.6.25 2.6.25
Smarty Smarty 1.4.0 1.4.0
Smarty Smarty 1.4.5 1.4.5
Smarty Smarty 2.6.1 2.6.1
Smarty Smarty 2.6.7 2.6.7
Smarty Smarty 2.6.20 2.6.20
Smarty Smarty 2.3.0 2.3.0
Smarty Smarty 1.0a 1.0a
Smarty Smarty 1.1.0 1.1.0
Smarty Smarty 1.4.0 1.4.0
Smarty Smarty 2.6.0 2.6.0
Smarty Smarty 2.6.15 2.6.15
Smarty Smarty 2.6.3 2.6.3
Smarty Smarty 2.6.14 2.6.14
Smarty Smarty 2.5.0 2.5.0
Smarty Smarty 1.2.1 1.2.1
Smarty Smarty 2.6.17 2.6.17
Smarty Smarty 2.6.11 2.6.11
Smarty Smarty 2.6.0 2.6.0
Smarty Smarty 1.3.0 1.3.0
Smarty Smarty 1.4.1 1.4.1
Smarty Smarty 2.5.0 2.5.0
Smarty Smarty 2.0.1 2.0.1
Smarty Smarty 2.5.0 2.5.0
Smarty Smarty 1.4.2 1.4.2
Smarty Smarty 1.5.0 1.5.0
Smarty Smarty 2.1.0 2.1.0
Smarty Smarty * 2.6.26
Smarty Smarty 2.6.22 2.6.22
Smarty Smarty 1.5.2 1.5.2
Smarty Smarty 2.6.12 2.6.12
Smarty Smarty 2.6.18 2.6.18
Smarty Smarty 1.5.1 1.5.1
Smarty Smarty 2.0.0 2.0.0
Smarty Smarty 2.4.1 2.4.1
Smarty Smarty 2.6.6 2.6.6
Smarty Smarty 2.6.16 2.6.16
Smarty Smarty 2.6.9 2.6.9
Smarty Smarty 1.2.2 1.2.2
Smarty Smarty 2.6.0 2.6.0
Smarty Smarty 2.6.24 2.6.24
Smarty Smarty 2.1.1 2.1.1
Smarty Smarty 2.6.4 2.6.4
Smarty Smarty 2.2.0 2.2.0
Smarty Smarty 2.4.2 2.4.2
Smarty Smarty 2.6.10 2.6.10
Smarty Smarty 2.6.2 2.6.2
Smarty Smarty 1.4.0 1.4.0
Smarty Smarty 2.6.13 2.6.13
Smarty Smarty 2.6.5 2.6.5
Smarty Smarty 1.3.2 1.3.2
Smarty Smarty 2.4.0 2.4.0
Smarty Smarty 1.3.1 1.3.1
Smarty Smarty 1.4.4 1.4.4
Smarty Smarty 1.4.6 1.4.6
Smarty Smarty 1.2.0 1.2.0

References