CVE-2005-4351

The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running.

Published Bycve@mitre.org

Published DateDec 31, 2005, 05:00

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

4.3

Vector String

AV:L/AC:L/Au:S/C:P/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

PARTIAL

References

http://archives.neohapsis.com/archives/openbsd/2005-10/1523.html
http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041177.html
http://www.redteam-pentesting.de/advisories/rt-sa-2005-015.txt
http://www.redteam-pentesting.de/advisories/rt-sa-2005-15.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/24037

Weakness Type (CWE):NVD-CWE-Other

CVSS Metrics

Base Score

4.3

Vector String

AV:L/AC:L/Au:S/C:P/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

PARTIAL