Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2005-2807

EPSS 0.40% · P61
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2005-2807

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, which allows local users to read portions of arbitrary files via the -f command line option.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Frox 任意配置文件访问漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Frox是一个开源的FTP透明代理，工作在BSD和其他使用ipfilter的操作系统下。 frox 0.7.18，运行setuid根目录时，在读取配置文件时无法正确分配权限，这样本地用户就可以通过-f 命令选项任意读取一部分文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2005-2807

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-2807

Please Login to view more intelligence information

Same Patch Batch · n/a · 2005-09-07 · 21 CVEs total

CVE-2005-2816Greymatter跨站脚本漏洞
CVE-2005-2840MAXdev MD-Pro多个未知漏洞
CVE-2005-2839MAXdev MD-Pro 多个跨站脚本漏洞
CVE-2005-2838MyBloggie login.php SQL 注入漏洞
CVE-2005-2837PlainBlack WebGUI 多个eval注入漏洞
CVE-2005-2836Phorum多个跨站脚本漏洞
CVE-2005-2820SqWebMail 跨站脚本漏洞
CVE-2005-2819DownFile权限提升漏洞
CVE-2005-2818DownFile 跨站脚本漏洞
CVE-2005-2817Simple Machines Forum信息泄露漏洞
CVE-2005-2794Squid Proxy store.c远程拒绝服务漏洞
CVE-2005-2815FlatNuke print.php信息泄漏或拒绝服务漏洞
CVE-2005-2814FlatNuke vis_reg跨站脚本漏洞
CVE-2005-2813Flatnuke Index.PHP 目录遍历漏洞
CVE-2005-2812man2web远程命令执行漏洞
CVE-2005-2811Net-SNMP不可信搜索路径漏洞
CVE-2005-2810Urban多个栈缓冲区溢出漏洞
CVE-2005-2809SILC Server以不安全方式创建临时文件漏洞
CVE-2005-2808Frox绕过访问限制漏洞
CVE-2005-2796Squid sslConnectTimeout 函数拒绝服务漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-2807

No comments yet

Leave a comment