CVE Daily

CVE-2005-4660

Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local use...

Low CVSS 1.2

Overview

Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window when the archive is owned by "nobody" but not yet encrypted, then executing ipcoprscfg to restore from this backup.

CWE: N/A Published: 2005-12-31T05:00:00.000
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 1.2 (LOW)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags