4.3med
CVE-2005-4351
The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root user…
Published 20 y ago · modified 4 mo ago · JSON
CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 37%
Public exploits
0
none known
Summary
The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another filesystem that masks the immutable files while the system is running.
Exploit prediction (EPSS)
0.43% probability of exploitation in the next 30 days, higher than 37% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:L/AC:L/Au:S/C:P/I:P/A:P |
Classification
- Technology feeds
- Linux kernel (RSS, critical only)
References
- redteam-pentesting.de /advisories/rt-sa-2005-015.txt · x_refsource_MISC, x_transferred
- lists.grok.org.uk /pipermail/full-disclosure/2006-January/041177.html · mailing-list, x_refsource_FULLDISC, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/24037 · vdb-entry, x_refsource_XF, x_transferred
- redteam-pentesting.de /advisories/rt-sa-2005-15.txt · x_refsource_MISC, x_transferred
- archives.neohapsis.com /archives/openbsd/2005-10/1523.html · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2005-4351
- NVD: CVE-2005-4351
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.