CVEvulnerability

CVE-2005-3148

4.6 MEDIUM Published 2005-10-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-10-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership.

Affected configurations

• storebackup storebackup 1.1 • storebackup storebackup 1.2 • storebackup storebackup 1.3 • storebackup storebackup 1.4 • storebackup storebackup 1.5 • storebackup storebackup 1.6 • storebackup storebackup 1.7 • storebackup storebackup 1.8 • storebackup storebackup 1.8.1 • storebackup storebackup 1.9 • storebackup storebackup 1.9.1 • storebackup storebackup 1.10 • storebackup storebackup 1.10.1 • storebackup storebackup 1.11 • storebackup storebackup 1.12 • storebackup storebackup 1.12.1 • storebackup storebackup 1.12.2 • storebackup storebackup 1.13 • storebackup storebackup 1.14 • storebackup storebackup 1.15 • storebackup storebackup 1.16 • storebackup storebackup 1.16.1 • storebackup storebackup 1.16.2 • storebackup storebackup 1.17 • storebackup storebackup 1.18 • storebackup storebackup 1.18.1 • storebackup storebackup 1.18.2 • storebackup storebackup 1.18.3 • storebackup storebackup 1.18.4 • suse suse linux

Related

Referenced by CWE · observed example (1)

  • CWE-708 Incorrect Ownership Assignment weakness

References