CVE-2005-4660
Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet…
Does this matter?
Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.
Description
Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.
- CVSS 2.0
- 1.2 LOWAV:L/AC:H/Au:N/C:N/I:P/A:N
- EPSS
- 0.29% probability · 22th percentile
- CISA KEV
- Not listed
- Affected
- ipcop/ipcop
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/17513/Patch
- http://sourceforge.net/tracker/index.php?func=detail&aid=1344047&group_id=40604&atid=428516
- http://www.securityfocus.com/bid/15378
- http://secunia.com/advisories/17513/Patch
- http://sourceforge.net/tracker/index.php?func=detail&aid=1344047&group_id=40604&atid=428516
- http://www.securityfocus.com/bid/15378
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.