CVE-2005-3321

Published Oct 27, 2005

Last updated 6 years ago

Overview

Description: chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:novell:suse_linux:10.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "92FB0F1B-80B4-47F9-A54C-51DB7E77CA08"
          },
          {
            "criteria": "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
          },
          {
            "criteria": "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "56EF103F-5668-4754-A83B-D3662D0CE815"
          },
          {
            "criteria": "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
          },
          {
            "criteria": "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D5F98B9A-880E-45F0-8C16-12B22970F0D1"
          },
          {
            "criteria": "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
          },
          {
            "criteria": "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"
          },
          {
            "criteria": "cpe:2.3:o:suse:suse_linux:9.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A7D073E9-E535-4B36-BEF2-8499536E37DA"
          },
          {
            "criteria": "cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9C7018E7-F90C-435D-A07A-05A294EA2827"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References