CVE-2005-4659

IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system…

published January 16, 2006

CVSS
—
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing ipcoprscfg to restore from this backup.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00345 · 26.7th percentile
Published
2006-01-16T21:00Z
EPSS history
Timeline
  • 16 JAN 21:00Z
    IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system…
    cvelistv5