Unscored severity · published Aug 3, 2005
CVE-2005-2449
Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp
–
CVSS
0.3%
EPSS
No
On KEV
Description
Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Sandbox · Sandbox
1.2; 1.2.1; 1.2.1_r3; 1.2.2; 1.2.3; 1.2.4; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2449
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2449
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=96782
secunia.com
http://secunia.com/advisories/16214
securitytracker.com
http://securitytracker.com/id?1014574
Patch
http://www.gentoo.org/security/en/glsa/glsa-200507-22.xml
www.securityfocus.com
http://www.securityfocus.com/bid/14375
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/21519
More from Sandbox
–
CVE-2008-5694
PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified…