CVE-2005-0610

Published Apr 13, 2005 CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Description
Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2005-0611 Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
freebsd
Published
Updated
Aug 7, 2024, 9:21 PM
Reserved
Mar 1, 2005, 12:00 AM
Status
Modified
Published
Apr 12, 2005, 4:00 AM
Modified
Jun 16, 2026, 10:11 PM