CVE-2005-2657

Published Sep 16, 2005

Last updated 6 hours ago

Overview

Description: Unknown vulnerability in common-lisp-controller 4.18 and earlier allows local users to gain privileges by compiling arbitrary code in the cache directory, which is executed by another user if the user has not run Common Lisp before.
Source: security@debian.org
NVD status: Deferred

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:common-lisp-controller:common-lisp-controller:4.18:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DD357A83-5979-44BD-B96B-E53736808F15"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References