CVE-2005-4660

Published Jan 16, 2006 CVSS 2.0 · 1.2 Low EPSS < 1% KEV · Not listed
Description
Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2005-4654 Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 17, 2024, 12:31 AM
Reserved
Jan 16, 2006, 12:00 AM
Status
Modified
Published
Dec 31, 2005, 5:00 AM
Modified
Jun 16, 2026, 10:19 PM