CVE-2005-3546 - Vulnerability Details - OpenCVE

suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
F-secure	F-secure Anti-virus Internet Gatekeeper

Configuration 1 [-]

OR	cpe:2.3:a:f-secure:f-secure_anti-virus:::linux_gateways:::::*
	cpe:2.3:a:f-secure:internet_gatekeeper:::linux:::::*

No data.

References

Link	Providers
http://secunia.com/advisories/17467
http://securitytracker.com/id?1015159
http://securitytracker.com/id?1015160
http://www.f-secure.com/security/fsc-2005-3.shtml
http://www.osvdb.org/20513
http://www.osvdb.org/20537
http://www.osvdb.org/20538
http://www.osvdb.org/20539
http://www.osvdb.org/20540
http://www.osvdb.org/20541
http://www.osvdb.org/20542
http://www.osvdb.org/20543
http://www.osvdb.org/20544
http://www.osvdb.org/20545
http://www.osvdb.org/20546
http://www.osvdb.org/20547
http://www.osvdb.org/20548
http://www.osvdb.org/20549
http://www.osvdb.org/20550
http://www.osvdb.org/20551
http://www.osvdb.org/20552
http://www.securityfocus.com/bid/15339
http://www.vupen.com/english/advisories/2005/2331
https://exchange.xforce.ibmcloud.com/vulnerabilities/22966

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-11-16T07:37:00

Updated: 2024-08-07T23:17:23.308Z

Reserved: 2005-11-16T00:00:00

Link: CVE-2005-3546

Vulnrichment

No data.

NVD

Status : Modified

Published: 2005-11-16T07:42:00.000

Modified: 2024-11-21T00:02:09.047

Link: CVE-2005-3546

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-11-07T00:00:00", "descriptions": [{"lang": "en", "value": "suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1015160", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015160"}, {"name": "20546", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20546"}, {"name": "20543", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20543"}, {"name": "20538", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20538"}, {"name": "20540", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20540"}, {"name": "20549", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20549"}, {"name": "17467", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17467"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.f-secure.com/security/fsc-2005-3.shtml"}, {"name": "20544", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20544"}, {"name": "20547", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20547"}, {"name": "ADV-2005-2331", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2005/2331"}, {"name": "20550", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20550"}, {"name": "20541", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20541"}, {"name": "20551", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20551"}, {"name": "20537", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20537"}, {"name": "1015159", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015159"}, {"name": "20545", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20545"}, {"name": "20513", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20513"}, {"name": "20552", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20552"}, {"name": "fsecure-scripts-root-privileges(22966)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22966"}, {"name": "20539", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20539"}, {"name": "20548", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20548"}, {"name": "15339", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15339"}, {"name": "20542", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/20542"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-3546", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1015160", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015160"}, {"name": "20546", "refsource": "OSVDB", "url": "http://www.osvdb.org/20546"}, {"name": "20543", "refsource": "OSVDB", "url": "http://www.osvdb.org/20543"}, {"name": "20538", "refsource": "OSVDB", "url": "http://www.osvdb.org/20538"}, {"name": "20540", "refsource": "OSVDB", "url": "http://www.osvdb.org/20540"}, {"name": "20549", "refsource": "OSVDB", "url": "http://www.osvdb.org/20549"}, {"name": "17467", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17467"}, {"name": "http://www.f-secure.com/security/fsc-2005-3.shtml", "refsource": "CONFIRM", "url": "http://www.f-secure.com/security/fsc-2005-3.shtml"}, {"name": "20544", "refsource": "OSVDB", "url": "http://www.osvdb.org/20544"}, {"name": "20547", "refsource": "OSVDB", "url": "http://www.osvdb.org/20547"}, {"name": "ADV-2005-2331", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2005/2331"}, {"name": "20550", "refsource": "OSVDB", "url": "http://www.osvdb.org/20550"}, {"name": "20541", "refsource": "OSVDB", "url": "http://www.osvdb.org/20541"}, {"name": "20551", "refsource": "OSVDB", "url": "http://www.osvdb.org/20551"}, {"name": "20537", "refsource": "OSVDB", "url": "http://www.osvdb.org/20537"}, {"name": "1015159", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015159"}, {"name": "20545", "refsource": "OSVDB", "url": "http://www.osvdb.org/20545"}, {"name": "20513", "refsource": "OSVDB", "url": "http://www.osvdb.org/20513"}, {"name": "20552", "refsource": "OSVDB", "url": "http://www.osvdb.org/20552"}, {"name": "fsecure-scripts-root-privileges(22966)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22966"}, {"name": "20539", "refsource": "OSVDB", "url": "http://www.osvdb.org/20539"}, {"name": "20548", "refsource": "OSVDB", "url": "http://www.osvdb.org/20548"}, {"name": "15339", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15339"}, {"name": "20542", "refsource": "OSVDB", "url": "http://www.osvdb.org/20542"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:17:23.308Z"}, "title": "CVE Program Container", "references": [{"name": "1015160", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015160"}, {"name": "20546", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20546"}, {"name": "20543", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20543"}, {"name": "20538", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20538"}, {"name": "20540", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20540"}, {"name": "20549", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20549"}, {"name": "17467", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17467"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.f-secure.com/security/fsc-2005-3.shtml"}, {"name": "20544", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20544"}, {"name": "20547", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20547"}, {"name": "ADV-2005-2331", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2005/2331"}, {"name": "20550", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20550"}, {"name": "20541", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20541"}, {"name": "20551", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20551"}, {"name": "20537", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20537"}, {"name": "1015159", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015159"}, {"name": "20545", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20545"}, {"name": "20513", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20513"}, {"name": "20552", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20552"}, {"name": "fsecure-scripts-root-privileges(22966)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22966"}, {"name": "20539", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20539"}, {"name": "20548", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20548"}, {"name": "15339", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15339"}, {"name": "20542", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/20542"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-3546", "datePublished": "2005-11-16T07:37:00", "dateReserved": "2005-11-16T00:00:00", "dateUpdated": "2024-08-07T23:17:23.308Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_gateways:*:*:*:*:*", "matchCriteriaId": "F83DDDED-51E8-43DE-BBA8-4AD36F920BF8", "vulnerable": true}, {"criteria": "cpe:2.3:a:f-secure:internet_gatekeeper:*:*:linux:*:*:*:*:*", "matchCriteriaId": "A4C973E1-597B-4D5C-B8AA-DCCEE4FC3480", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege."}, {"lang": "es", "value": "Los scritps suid.cgi en F-Secure (1) Internet Gatekeeper para Linux anteriores a 2.15.484 y (2) Anti-Virus Linux Gateway anteriores a 2.16 son instalados con SUID y con permiso de ejecuci\u00f3n para todo el mundo, lo que permite a usuarios locales ganar privilegios.\r\n"}], "id": "CVE-2005-3546", "lastModified": "2024-11-21T00:02:09.047", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-11-16T07:42:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/17467"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015159"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015160"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.f-secure.com/security/fsc-2005-3.shtml"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20513"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20537"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20538"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20539"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20540"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20541"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20542"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20543"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20544"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20545"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20546"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20547"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20548"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20549"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20550"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20551"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/20552"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/15339"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2005/2331"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22966"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/17467"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015159"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015160"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.f-secure.com/security/fsc-2005-3.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20513"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20537"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20538"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20539"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20540"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20541"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20542"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20543"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20544"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20545"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20546"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20547"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20548"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20549"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20550"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20551"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/20552"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/15339"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2005/2331"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22966"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}