NetSight
medium6.4

CVE-2005-4772

liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might all…

Impact

liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013.

Affected products

VendorProductAffected versions
SuseSuse Linux Openexchange Server
Version 4.0
SuseSuse Linux School Server
Version gold
SuseSuse Linux Standard Server
Version 8.0
SuseSuse Sled Beagle
Version 10.0
SuseSuse Linux
Versions 1.0, 8, 8.0, 8.2, 9.0, 9.1

References