CVE-2004-2605 - Vulnerability Details - OpenCVE

aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Astats	Astats

Configuration 1 [-]

cpe:2.3:a:astats:astats:1.6.5:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604
http://secunia.com/advisories/13679
http://shellcode.org/pipermail/debian-audit/2004-December/000078.html
http://www.osvdb.org/12632
http://www.securityfocus.com/bid/12128
https://exchange.xforce.ibmcloud.com/vulnerabilities/18698

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-11-29T02:00:00

Updated: 2024-08-08T01:36:25.239Z

Reserved: 2005-11-29T00:00:00

Link: CVE-2004-2605

Vulnrichment

No data.

NVD

Status : Modified

Published: 2004-12-31T05:00:00.000

Modified: 2024-11-20T23:53:46.923

Link: CVE-2004-2605

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-12-29T00:00:00", "descriptions": [{"lang": "en", "value": "aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "[Debian-audit] 20041229 More temporary filenames/dirs related bugs", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://shellcode.org/pipermail/debian-audit/2004-December/000078.html"}, {"name": "13679", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/13679"}, {"name": "12128", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/12128"}, {"name": "astats-symlink(18698)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18698"}, {"name": "12632", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/12632"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2004-2605", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "[Debian-audit] 20041229 More temporary filenames/dirs related bugs", "refsource": "MLIST", "url": "http://shellcode.org/pipermail/debian-audit/2004-December/000078.html"}, {"name": "13679", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/13679"}, {"name": "12128", "refsource": "BID", "url": "http://www.securityfocus.com/bid/12128"}, {"name": "astats-symlink(18698)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18698"}, {"name": "12632", "refsource": "OSVDB", "url": "http://www.osvdb.org/12632"}, {"name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604", "refsource": "CONFIRM", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T01:36:25.239Z"}, "title": "CVE Program Container", "references": [{"name": "[Debian-audit] 20041229 More temporary filenames/dirs related bugs", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://shellcode.org/pipermail/debian-audit/2004-December/000078.html"}, {"name": "13679", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/13679"}, {"name": "12128", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/12128"}, {"name": "astats-symlink(18698)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18698"}, {"name": "12632", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/12632"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-2605", "datePublished": "2005-11-29T02:00:00", "dateReserved": "2005-11-29T00:00:00", "dateUpdated": "2024-08-08T01:36:25.239Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:astats:astats:1.6.5:*:*:*:*:*:*:*", "matchCriteriaId": "58FB1702-AEE5-4021-933F-686B10CA3DC1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files."}], "id": "CVE-2004-2605", "lastModified": "2024-11-20T23:53:46.923", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/13679"}, {"source": "cve@mitre.org", "url": "http://shellcode.org/pipermail/debian-audit/2004-December/000078.html"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/12632"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/12128"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18698"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/13679"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://shellcode.org/pipermail/debian-audit/2004-December/000078.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/12632"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/12128"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18698"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}