mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
289 lines
9.8 KiB
JSON
289 lines
9.8 KiB
JSON
{
|
|
"id": "CVE-2005-3148",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2005-10-05T21:02:00.000",
|
|
"lastModified": "2024-11-21T00:01:13.537",
|
|
"vulnStatus": "Modified",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
|
|
"baseScore": 4.6,
|
|
"accessVector": "LOCAL",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "PARTIAL",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "PARTIAL"
|
|
},
|
|
"baseSeverity": "MEDIUM",
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 6.4,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": true,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "NVD-CWE-Other"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "56A5B037-A737-472C-866F-F86EEEDF30D9"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E7F7732C-040D-4DA3-8F02-3F651DBB8752"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7F60E29E-45A2-49C3-A8F7-CDF42300A7A6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8AB0D75A-D55D-4846-B581-47398344BD39"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D2A62393-39F7-45B9-9969-EF328B6804FF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D2009E5F-8C8F-4A91-AEDB-FC7144364C88"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5531AA6C-C729-4910-8FC0-11B27D942AFC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.8:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "750899E8-04DF-4594-BD7F-4A2044233C71"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.8.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BAE30852-D827-47D5-94F9-6BDA1358C2F8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.9:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "88417E27-47E3-4C4C-BAC9-3C1639F99388"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.9.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A7FF3CCC-AC43-410F-958A-6E0FA23FD2F9"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.10:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7F77A5E1-A4A6-4699-A18B-FDE941402749"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.10.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4034B2BF-3A2C-4A6A-A5E9-A93816AD7CE7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.11:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "00FD7AB3-2BFF-45F5-8962-8E3E87EF5C36"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.12:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8F668721-FDE7-48FA-ABDE-FE036467CCCB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.12.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7DE5598E-0478-4D6F-AE78-55F55470DCEA"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.12.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AAF78954-AD7E-441B-A514-83300738BCA7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.13:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "37953139-D103-4371-8015-4363869BF359"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.14:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6D0FBB65-804F-4A4C-9D1F-940731C187CE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.15:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "228A7BFD-C097-4225-B43B-877729E87519"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.16:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F8504BF7-89C4-45C6-A6F2-1674CF4CC7E3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.16.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "17C2B452-2333-47E2-961E-753CDE5AC064"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.16.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B0EF03CA-39D8-4FD5-B68F-96CD953F70EC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.17:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AAA9FC18-076D-4DA6-A3C0-CB5182F60D4D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.18:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0EED05AB-16BD-4547-98C9-123EDDA40EC0"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.18.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "436D746E-A601-4063-B11A-ADF5D71B0D85"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.18.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "69875274-9655-4395-9A94-BC743C673604"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.18.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1A5DA6A5-9842-4483-B0C0-9C79B775E85F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:storebackup:storebackup:1.18.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0871F4C9-ED38-4184-9537-5044C06D5769"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "67527281-81FA-4068-9E0A-7B19FB6A208A"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/17025",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/19489",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://sourceforge.net/project/shownotes.php?release_id=352676",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Patch",
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/advisories/9384",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.us.debian.org/security/2006/dsa-1022",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/17025",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/19489",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://sourceforge.net/project/shownotes.php?release_id=352676",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Patch",
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/advisories/9384",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.us.debian.org/security/2006/dsa-1022",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
}
|
|
]
|
|
} |