Vulnerability in SUSE Linux

CVE-2005-4772

liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013.

EPSS: 0.012 (65.9th percentile) — read the EPSS interpretation.

Affected products

Suse Suse_linux — versions 1.0, 8, 8.0
Suse Suse_linux_openexchange_server — versions 4.0
Suse Suse_linux_school_server — versions gold
Suse Suse_linux_standard_server — versions 8.0
Suse Suse_sled_beagle — versions 10.0
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, Patch, x_refsource_SUSE, Vendor Advisory)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)