Vulnerability Details CVE-2005-0071
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.3%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/13930
- http://secunia.com/advisories/13995
- http://secunia.com/advisories/14066
- http://www.debian.org/security/2005/dsa-656
- http://www.gentoo.org/security/en/glsa/glsa-200501-42.xml
- http://www.securityfocus.com/bid/12356
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19066
- http://secunia.com/advisories/13930
- http://secunia.com/advisories/13995
- http://secunia.com/advisories/14066
- http://www.debian.org/security/2005/dsa-656
- http://www.gentoo.org/security/en/glsa/glsa-200501-42.xml
- http://www.securityfocus.com/bid/12356
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19066
Products affected by CVE-2005-0071
-
cpe:2.3:a:vdr:vdr:1.0.0
-
cpe:2.3:a:vdr:vdr:1.0.4
-
cpe:2.3:a:vdr:vdr:1.2.0
-
cpe:2.3:a:vdr:vdr:1.2.1
-
cpe:2.3:a:vdr:vdr:1.2.2
-
cpe:2.3:a:vdr:vdr:1.2.5