CVE-2005-2449 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2005-2449

Deferred

More Info Official Page

Source-cve@mitre.org

Published At-03 Aug, 2005 | 04:00

Updated At-03 Apr, 2025 | 01:03

Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	1.2	LOW	AV:L/AC:H/Au:N/C:N/I:P/A:N

CPE Matches

sandbox>>sandbox>>1.2

cpe:2.3:a:sandbox:sandbox:1.2:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.1

cpe:2.3:a:sandbox:sandbox:1.2.1:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.1_r3

cpe:2.3:a:sandbox:sandbox:1.2.1_r3:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.2

cpe:2.3:a:sandbox:sandbox:1.2.2:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.3

cpe:2.3:a:sandbox:sandbox:1.2.3:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.4

cpe:2.3:a:sandbox:sandbox:1.2.4:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.5

cpe:2.3:a:sandbox:sandbox:1.2.5:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.5_r1

cpe:2.3:a:sandbox:sandbox:1.2.5_r1:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.5_r2

cpe:2.3:a:sandbox:sandbox:1.2.5_r2:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.6

cpe:2.3:a:sandbox:sandbox:1.2.6:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.7

cpe:2.3:a:sandbox:sandbox:1.2.7:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.8

cpe:2.3:a:sandbox:sandbox:1.2.8:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.9

cpe:2.3:a:sandbox:sandbox:1.2.9:*:*:*:*:*:*:*

sandbox>>sandbox>>1.2.10

cpe:2.3:a:sandbox:sandbox:1.2.10:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://bugs.gentoo.org/show_bug.cgi?id=96782	cve@mitre.org	N/A
http://secunia.com/advisories/16214	cve@mitre.org	N/A
http://securitytracker.com/id?1014574	cve@mitre.org	N/A
http://www.gentoo.org/security/en/glsa/glsa-200507-22.xml	cve@mitre.org	Patch Vendor Advisory
http://www.securityfocus.com/bid/14375	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/21519	cve@mitre.org	N/A
http://bugs.gentoo.org/show_bug.cgi?id=96782	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/16214	af854a3a-2127-422b-91ae-364da2661108	N/A
http://securitytracker.com/id?1014574	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.gentoo.org/security/en/glsa/glsa-200507-22.xml	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.securityfocus.com/bid/14375	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/21519	af854a3a-2127-422b-91ae-364da2661108	N/A