CVE-2005-4660

Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ipcop:ipcop:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.8:*:*:*:*:*:*:*
cpe:2.3:a:ipcop:ipcop:1.4.9:*:*:*:*:*:*:*

History

21 Nov 2024, 00:04

Type Values Removed Values Added
References () http://secunia.com/advisories/17513/ - Patch () http://secunia.com/advisories/17513/ - Patch
References () http://sourceforge.net/tracker/index.php?func=detail&aid=1344047&group_id=40604&atid=428516 - () http://sourceforge.net/tracker/index.php?func=detail&aid=1344047&group_id=40604&atid=428516 -
References () http://www.securityfocus.com/bid/15378 - () http://www.securityfocus.com/bid/15378 -

Information

Published : 2005-12-31 05:00

Updated : 2024-11-21 00:04


NVD link : CVE-2005-4660

Mitre link : CVE-2005-4660

CVE.ORG link : CVE-2005-4660


JSON object : View

Products Affected

ipcop

  • ipcop