CVE-2005-4772

liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2005-12-31

Last modified

2024-08-08

Affected products

• Suse Linux (Suse)
• Suse Linux Openexchange Server (Suse)
• Suse Linux School Server (Suse)
• Suse Linux Standard Server (Suse)
• Suse Sled Beagle (Suse)

References

• http://www.novell.com/linux/security/advisories/2005_22_sr.html
• http://www.securityfocus.com/bid/15026