CVE-2005-2960

no score yetEPSS 0.4%

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
Published: 2005-10-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
gnu:cfengine

References

http://bugs.gentoo.org/show_bug.cgi?id=107871
http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0
http://secunia.com/advisories/17037/
http://secunia.com/advisories/17038
http://secunia.com/advisories/17040

Check your stack JSON