National Cyber Awareness System

Vulnerability Summary for CVE-2005-1740

Overview

fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: MISC

Name: http://www.zataz.net/adviso/net-snmp-05182005.txt

Hyperlink:http://www.zataz.net/adviso/net-snmp-05182005.txt

External Source: VUPEN

Name: ADV-2005-0598

Hyperlink:http://www.vupen.com/english/advisories/2005/0598

External Source: OSVDB

Name: 16778

Hyperlink:http://www.osvdb.org/16778

External Source: GENTOO

Name: GLSA-200505-18

Type: Advisory

Hyperlink:http://security.gentoo.org/glsa/glsa-200505-18.xml

External Source: SECUNIA

Name: 15471

Hyperlink:http://secunia.com/advisories/15471

External Source: OVAL

Name: oval:org.mitre.oval:def:11659

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11659

External Source: BID

Name: 13715

Hyperlink:http://www.securityfocus.com/bid/13715

External Source: REDHAT

Name: RHSA-2005:395

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-395.html

External Source: REDHAT

Name: RHSA-2005:373

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-373.html

External Source: MANDRIVA

Name: MDKSA-2006:025

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:025

External Source: SECTRACK

Name: 1014039

Hyperlink:http://securitytracker.com/id?1014039

External Source: SECUNIA

Name: 18635

Hyperlink:http://secunia.com/advisories/18635

External Source: SECUNIA

Name: 17135

Hyperlink:http://secunia.com/advisories/17135

External Source: SECUNIA

Name: 16999

Hyperlink:http://secunia.com/advisories/16999

References to Check Content

Identifier:oval:org.mitre.oval:def:11659

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11659