Unscored severity · published Oct 5, 2005
CVE-2005-3148
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could…
–
CVSS
0.4%
EPSS
No
On KEV
Description
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
Storebackup · Storebackup
1.1; 1.2; 1.3; 1.4; 1.5; 1.6; +23 more · source: NVD
SL
Suse Linux · Suse
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3148
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3148
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434
secunia.com
http://secunia.com/advisories/17025
secunia.com
http://secunia.com/advisories/19489
Patch
http://sourceforge.net/project/shownotes.php?release_id=352676
Vendor Advisory
http://www.securityfocus.com/advisories/9384
www.us.debian.org
http://www.us.debian.org/security/2006/dsa-1022
More from Storebackup
8.1
CVE-2020-7040
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation
–
CVE-2005-3146
StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files
–
CVE-2005-3147
StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information