First published: Sun Apr 10 2005(Updated: )
Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m switch, allows local users to modify permissions of other files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GNU coreutils | =5.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-1039 has a moderate severity rating due to the potential for local users to exploit permissions.
To fix CVE-2005-1039, upgrade to a patched version of Core Utilities beyond version 5.2.1.
CVE-2005-1039 affects the functionalities of mkdir, mknod, and mkfifo when used with the -m switch.
Local users on systems running Core Utilities version 5.2.1 are affected by CVE-2005-1039.
No, CVE-2005-1039 is not exploitable remotely as it requires local user access.