Vulnerabilities > CVE-2005-3111 - Unspecified vulnerability in Debian Backupninja 0.8

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
local
low complexity
debian
nessus

Summary

The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack.

Vulnerable Configurations

Part Description Count
Application
Debian
2

Nessus

NASL familyDebian Local Security Checks
NASL idDEBIAN_DSA-827.NASL
descriptionMoritz Muehlenhoff discovered the handler code for backupninja creates a temporary file with a predictable filename, leaving it vulnerable to a symlink attack.
last seen2020-06-01
modified2020-06-02
plugin id19796
published2005-10-05
reporterThis script is Copyright (C) 2005-2019 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/19796
titleDebian DSA-827-1 : backupninja - insecure temporary file