CVEvulnerability

CVE-2005-0610

7.2 HIGH Published 2005-04-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-04-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.

Affected configurations

• freebsd freebsd 4.0 • freebsd freebsd 4.1 • freebsd freebsd 4.1.1 • freebsd freebsd 4.2 • freebsd freebsd 4.3 • freebsd freebsd 4.4 • freebsd freebsd 4.5 • freebsd freebsd 4.6 • freebsd freebsd 4.6.2 • freebsd freebsd 4.7 • freebsd freebsd 4.8 • freebsd freebsd 4.9 • freebsd freebsd 4.10 • freebsd freebsd 4.11 • freebsd freebsd 5.0 • freebsd freebsd 5.1 • freebsd freebsd 5.2 • freebsd freebsd 5.2.1 • freebsd freebsd 5.3 • freebsd freebsd 5.4

References