VULNERABILITY INTELLIGENCE

CVE-2005-1064

CVSS score4.6 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2005-04-10
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The copy_symlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files.

Primary references