Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2005-2180

EPSS 0.07% · P21
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2005-2180

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local users to overwrite arbitrary files.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
GNATS gen-index 文件覆盖漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNATS是一个开源的Bug记录工具。 GNATS 4.0， 4.1.0及之前更早版本中存在文件覆盖漏洞。 由于gen-index在设置setuid时，未正确检查传递给-o参数的文件并会以写访问权打开文件，这使得本地用户可覆盖任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2005-2180

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-2180

请登录查看更多情报信息。

Same Patch Batch · n/a · 2005-07-10 · 75 CVEs total

CVE-2004-2202DUware Software多个溢出漏洞
CVE-2005-2187McAfee IntruShieldSecurityManagementSystem 获取访问权限漏洞
CVE-2004-2210Express-Web Content Management System未明跨站脚本漏洞
CVE-2004-2209Ideal Science IdealBB多个未明的远程输入验证漏洞
CVE-2004-2208Ideal Science IdealBB多个未明远程输入验证漏洞
CVE-2004-2207Ideal Science IdealBB多个未明远程输入验证漏洞
CVE-2004-2206NatterChat未明SQL注入漏洞
CVE-2004-2205Veritas Cluster Server远程root用户访问漏洞
CVE-2004-2204Macromedia ColdFusion MX CreateObject和Java Extensibility过弱漏洞
CVE-2004-2203Federico David Sacerdoti Ansel不安全默认权限漏洞
CVE-2004-2211AliveSites Forum多个未明远程输入验证漏洞
CVE-2004-2201Duware软件多个远程漏洞
CVE-2004-2200DUware Software多个远程漏洞
CVE-2004-2199Duware软件多个远程漏洞
CVE-2004-2198DUware Software多个远程漏洞
CVE-2004-2197KDocker未明漏洞
CVE-2004-2196Zanfi CMS lite 1.1版本漏洞
CVE-2004-2195Zanfi CMS Lite远程文件包含漏洞
CVE-2004-2194MailEnable多个远程服务拒绝漏洞
CVE-2004-2193CJOverkill多个跨站脚本攻击漏洞

Showing top 20 of 75 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-2180

No comments yet

Leave a comment