CVE-2005-3111

The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2005-09-30

Last modified

2024-08-07

Affected products

• Backupninja (Debian)

References

• http://secunia.com/advisories/16995/
• http://secunia.com/advisories/17018
• http://www.debian.org/security/2005/dsa-827
• http://www.securityfocus.com/bid/14978
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22461