CVE-2005-3148

StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434
http://secunia.com/advisories/17025
http://secunia.com/advisories/19489
http://sourceforge.net/project/shownotes.php?release_id=352676	Patch Vendor Advisory
http://www.securityfocus.com/advisories/9384	Vendor Advisory
http://www.us.debian.org/security/2006/dsa-1022
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434
http://secunia.com/advisories/17025
http://secunia.com/advisories/19489
http://sourceforge.net/project/shownotes.php?release_id=352676	Patch Vendor Advisory
http://www.securityfocus.com/advisories/9384	Vendor Advisory
http://www.us.debian.org/security/2006/dsa-1022

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:storebackup:storebackup:1.1:::::::*
	cpe:2.3:a:storebackup:storebackup:1.2:::::::*
	cpe:2.3:a:storebackup:storebackup:1.3:::::::*
	cpe:2.3:a:storebackup:storebackup:1.4:::::::*
	cpe:2.3:a:storebackup:storebackup:1.5:::::::*
	cpe:2.3:a:storebackup:storebackup:1.6:::::::*
	cpe:2.3:a:storebackup:storebackup:1.7:::::::*
	cpe:2.3:a:storebackup:storebackup:1.8:::::::*
	cpe:2.3:a:storebackup:storebackup:1.8.1:::::::*
	cpe:2.3:a:storebackup:storebackup:1.9:::::::*
	cpe:2.3:a:storebackup:storebackup:1.9.1:::::::*
	cpe:2.3:a:storebackup:storebackup:1.10:::::::*
	cpe:2.3:a:storebackup:storebackup:1.10.1:::::::*
	cpe:2.3:a:storebackup:storebackup:1.11:::::::*
	cpe:2.3:a:storebackup:storebackup:1.12:::::::*
	cpe:2.3:a:storebackup:storebackup:1.12.1:::::::*
	cpe:2.3:a:storebackup:storebackup:1.12.2:::::::*
	cpe:2.3:a:storebackup:storebackup:1.13:::::::*
	cpe:2.3:a:storebackup:storebackup:1.14:::::::*
	cpe:2.3:a:storebackup:storebackup:1.15:::::::*
	cpe:2.3:a:storebackup:storebackup:1.16:::::::*
	cpe:2.3:a:storebackup:storebackup:1.16.1:::::::*
	cpe:2.3:a:storebackup:storebackup:1.16.2:::::::*
	cpe:2.3:a:storebackup:storebackup:1.17:::::::*
	cpe:2.3:a:storebackup:storebackup:1.18:::::::*
	cpe:2.3:a:storebackup:storebackup:1.18.1:::::::*
	cpe:2.3:a:storebackup:storebackup:1.18.2:::::::*
	cpe:2.3:a:storebackup:storebackup:1.18.3:::::::*
	cpe:2.3:a:storebackup:storebackup:1.18.4:::::::*

Configuration 2 (hide)

cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:01

Type	Values Removed	Values Added
References	~~() http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434 -~~	() http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434 -
References	~~() http://secunia.com/advisories/17025 -~~	() http://secunia.com/advisories/17025 -
References	~~() http://secunia.com/advisories/19489 -~~	() http://secunia.com/advisories/19489 -
References	~~() http://sourceforge.net/project/shownotes.php?release_id=352676 - Patch, Vendor Advisory~~	() http://sourceforge.net/project/shownotes.php?release_id=352676 - Patch, Vendor Advisory
References	~~() http://www.securityfocus.com/advisories/9384 - Vendor Advisory~~	() http://www.securityfocus.com/advisories/9384 - Vendor Advisory
References	~~() http://www.us.debian.org/security/2006/dsa-1022 -~~	() http://www.us.debian.org/security/2006/dsa-1022 -

Information

Published : 2005-10-05 21:02

Updated : 2025-04-03 01:03

NVD link : CVE-2005-3148

Mitre link : CVE-2005-3148

CVE.ORG link : CVE-2005-3148

JSON object : View

Products Affected

storebackup

storebackup

suse

suse_linux

CWE

NVD-CWE-Other

{"id": "CVE-2005-3148", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2005-10-05T21:02:00.000", "references": [{"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/17025", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/19489", "source": "cve@mitre.org"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=352676", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/advisories/9384", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.us.debian.org/security/2006/dsa-1022", "source": "cve@mitre.org"}, {"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/17025", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/19489", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=352676", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/advisories/9384", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us.debian.org/security/2006/dsa-1022", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:storebackup:storebackup:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56A5B037-A737-472C-866F-F86EEEDF30D9"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7F7732C-040D-4DA3-8F02-3F651DBB8752"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F60E29E-45A2-49C3-A8F7-CDF42300A7A6"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AB0D75A-D55D-4846-B581-47398344BD39"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2A62393-39F7-45B9-9969-EF328B6804FF"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2009E5F-8C8F-4A91-AEDB-FC7144364C88"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5531AA6C-C729-4910-8FC0-11B27D942AFC"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "750899E8-04DF-4594-BD7F-4A2044233C71"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BAE30852-D827-47D5-94F9-6BDA1358C2F8"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88417E27-47E3-4C4C-BAC9-3C1639F99388"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7FF3CCC-AC43-410F-958A-6E0FA23FD2F9"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F77A5E1-A4A6-4699-A18B-FDE941402749"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4034B2BF-3A2C-4A6A-A5E9-A93816AD7CE7"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00FD7AB3-2BFF-45F5-8962-8E3E87EF5C36"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F668721-FDE7-48FA-ABDE-FE036467CCCB"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.12.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DE5598E-0478-4D6F-AE78-55F55470DCEA"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.12.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAF78954-AD7E-441B-A514-83300738BCA7"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37953139-D103-4371-8015-4363869BF359"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D0FBB65-804F-4A4C-9D1F-940731C187CE"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "228A7BFD-C097-4225-B43B-877729E87519"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8504BF7-89C4-45C6-A6F2-1674CF4CC7E3"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.16.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17C2B452-2333-47E2-961E-753CDE5AC064"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.16.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0EF03CA-39D8-4FD5-B68F-96CD953F70EC"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAA9FC18-076D-4DA6-A3C0-CB5182F60D4D"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EED05AB-16BD-4547-98C9-123EDDA40EC0"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.18.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "436D746E-A601-4063-B11A-ADF5D71B0D85"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.18.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69875274-9655-4395-9A94-BC743C673604"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.18.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A5DA6A5-9842-4483-B0C0-9C79B775E85F"}, {"criteria": "cpe:2.3:a:storebackup:storebackup:1.18.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0871F4C9-ED38-4184-9537-5044C06D5769"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67527281-81FA-4068-9E0A-7B19FB6A208A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

4.6 /10