CVE-2005-2657

Published Sep 16, 2005

Last updated 7 years ago

Overview

Description: Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the cache directory, which is executed by another user if the user has not run Common Lisp before.
Source: security@debian.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:common-lisp-controller:common-lisp-controller:4.18:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DD357A83-5979-44BD-B96B-E53736808F15"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References