Vulnerability in Freebsd
CVE-2005-0610
Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.
EPSS: 0.004 (31.2th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 4.0, 4.1, 4.1.1
- N/a — versions n/a
References
- secteam@freebsd.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secteam@freebsd.org (vdb-entry, x_refsource_BID, Vendor Advisory)
- secteam@freebsd.org (Patch, x_refsource_MISC, Vendor Advisory)