{
  "id": "CVE-2005-3146",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2005-10-05T21:02:00.000",
  "lastModified": "2008-09-05T20:53:34.857",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
          "accessVector": "LOCAL",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "NONE",
          "baseScore": 2.1
        },
        "baseSeverity": "LOW",
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "56A5B037-A737-472C-866F-F86EEEDF30D9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E7F7732C-040D-4DA3-8F02-3F651DBB8752"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F60E29E-45A2-49C3-A8F7-CDF42300A7A6"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AB0D75A-D55D-4846-B581-47398344BD39"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A62393-39F7-45B9-9969-EF328B6804FF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2009E5F-8C8F-4A91-AEDB-FC7144364C88"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "5531AA6C-C729-4910-8FC0-11B27D942AFC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "750899E8-04DF-4594-BD7F-4A2044233C71"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAE30852-D827-47D5-94F9-6BDA1358C2F8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "88417E27-47E3-4C4C-BAC9-3C1639F99388"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7FF3CCC-AC43-410F-958A-6E0FA23FD2F9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F77A5E1-A4A6-4699-A18B-FDE941402749"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.10.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4034B2BF-3A2C-4A6A-A5E9-A93816AD7CE7"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "00FD7AB3-2BFF-45F5-8962-8E3E87EF5C36"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F668721-FDE7-48FA-ABDE-FE036467CCCB"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.12.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DE5598E-0478-4D6F-AE78-55F55470DCEA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.12.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "AAF78954-AD7E-441B-A514-83300738BCA7"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "37953139-D103-4371-8015-4363869BF359"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D0FBB65-804F-4A4C-9D1F-940731C187CE"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "228A7BFD-C097-4225-B43B-877729E87519"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8504BF7-89C4-45C6-A6F2-1674CF4CC7E3"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.16.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "17C2B452-2333-47E2-961E-753CDE5AC064"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.16.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0EF03CA-39D8-4FD5-B68F-96CD953F70EC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "AAA9FC18-076D-4DA6-A3C0-CB5182F60D4D"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EED05AB-16BD-4547-98C9-123EDDA40EC0"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.18.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "436D746E-A601-4063-B11A-ADF5D71B0D85"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.18.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "69875274-9655-4395-9A94-BC743C673604"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.18.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A5DA6A5-9842-4483-B0C0-9C79B775E85F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:storebackup:storebackup:1.18.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "0871F4C9-ED38-4184-9537-5044C06D5769"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "67527281-81FA-4068-9E0A-7B19FB6A208A"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?release_id=352676",
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "http://www.securityfocus.com/advisories/9384",
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/bid/14985",
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "http://www.us.debian.org/security/2006/dsa-1022",
      "source": "cve@mitre.org"
    }
  ]
}