VDB
CVE-2005-2672
CVE-2005-2672
PUBLISHED
CVSS 2.0999999046325684 LOW
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.
EPSS 0.43% · 36.9th percentile
Risk Scores
CVSS 2.0
2.0999999046325684
EPSS Score
0.43%
36.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| lm_sensors | lm_sensors | 2.0.1, 2.1.1, 2.1.2 |
Timeline
- Aug 22, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 30, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 16, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 31, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 15, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- Jun 2, 2023 EPSS Score
References
- USN-172-1 vendor-advisory
- 16501 third-party-advisory
- RHSA-2005:825 vendor-advisory
- oval:org.mitre.oval:def:9993 vdb
- DSA-814 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324193 technical
- http://secunia.com/advisories/17535 technical
- http://securitytracker.com/id?1015180 technical
- http://www.vupen.com/english/advisories/2005/1492 technical
- http://secure.netroedge.com/~lm78/cvs/lm_sensors2/CHANGES technical
- http://www.securityfocus.com/bid/14624 technical
- https://nvd.nist.gov/vuln/detail/CVE-2005-2672 advisory
- https://usn.ubuntu.com/172-1 url
- http://secunia.com/advisories/17499 url
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:149 url