NetSight
IP …
low2.1

CVE-2005-4659

IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuratio…

Impact

IPCop (aka IPCop Firewall) before 1.4.10 has world-readable permissions for the backup.key file, which might allow local users to overwrite system configuration files and gain privileges by creating a malicious encrypted backup archive owned by "nobody", then executing ipcoprscfg to restore from this backup.

Affected products

VendorProductAffected versions
IpcopIpcop
Versions 1.4.1, 1.4.2, 1.4.4, 1.4.5, 1.4.6, 1.4.8

References