CVE-2005-2995: Low severity Bacula bacula vulnerability
Published Sep 20, 2005
·Updated
bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autoconf/randpass when openssl is not available, or (2) the mtx.[PID] temporary file in mtx-changer.in.
Affected Software
1 affected component
Bacula bacula<=1.36.3
Remediation
Patch Available
Patch Available
Event History
Sep 20, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2995?
CVE-2005-2995 is classified as a medium severity vulnerability due to the risk of local users gaining access to sensitive files.
2
How do I fix CVE-2005-2995?
To fix CVE-2005-2995, upgrade to Bacula version 1.36.4 or later to mitigate the symlink attack vulnerabilities.
3
Who is affected by CVE-2005-2995?
CVE-2005-2995 affects users of Bacula version 1.36.3 and earlier.
4
What type of attack does CVE-2005-2995 involve?
CVE-2005-2995 involves symlink attacks that allow local users to manipulate or read sensitive files.
5
Can CVE-2005-2995 be exploited remotely?
No, CVE-2005-2995 is not a remotely exploitable vulnerability; it requires local access to the system.