CVE-2005-3147
UnknownEPSS 0.36%
Last modified
CVE-2005-3147 is a vulnerability of currently unknown severity. StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Storebackup | Storebackup | 1.1 |
| Storebackup | Storebackup | 1.2 |
| Storebackup | Storebackup | 1.3 |
| Storebackup | Storebackup | 1.4 |
| Storebackup | Storebackup | 1.5 |
| Storebackup | Storebackup | 1.6 |
| Storebackup | Storebackup | 1.7 |
| Storebackup | Storebackup | 1.8 |
| Storebackup | Storebackup | 1.8.1 |
| Storebackup | Storebackup | 1.9 |
| Storebackup | Storebackup | 1.9.1 |
| Storebackup | Storebackup | 1.10 |
| Storebackup | Storebackup | 1.10.1 |
| Storebackup | Storebackup | 1.11 |
| Storebackup | Storebackup | 1.12 |
| Storebackup | Storebackup | 1.12.1 |
| Storebackup | Storebackup | 1.12.2 |
| Storebackup | Storebackup | 1.13 |
| Storebackup | Storebackup | 1.14 |
| Storebackup | Storebackup | 1.15 |
| Storebackup | Storebackup | 1.16 |
| Storebackup | Storebackup | 1.16.1 |
| Storebackup | Storebackup | 1.16.2 |
| Storebackup | Storebackup | 1.17 |
| Storebackup | Storebackup | 1.18 |
| Storebackup | Storebackup | 1.18.1 |
| Storebackup | Storebackup | 1.18.2 |
| Storebackup | Storebackup | 1.18.3 |
| Storebackup | Storebackup | 1.18.4 |
| Suse | Suse Linux | All versions |
References
- http://www.securityfocus.com/advisories/9384Vendor Advisory
- http://www.securityfocus.com/advisories/9384Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-3147?
StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.
How severe is CVE-2005-3147?
Severity scoring for CVE-2005-3147 is pending analysis. The EPSS model estimates a 0.36% probability of exploitation in the next 30 days.
How do I fix CVE-2005-3147?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-3141Cerulean Studios Trillian 3.0 allows remote attackers to cau…
- CVE-2005-3142Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 …
- CVE-2005-3143Unspecified vulnerability in the Mailbox Server for 4D WebSt…
- CVE-2005-3144httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attac…
- CVE-2005-3145httpAdapter.c in sblim-sfcb before 0.9.2 allows remote attac…
- CVE-2005-3146StoreBackup before 1.19 allows local users to perform unauth…
- CVE-2005-3148StoreBackup before 1.19 does not properly set the uid and gu…
- CVE-2005-3149Uim 0.4.x before 0.4.9.1 and 0.5.0 and earlier does not prop…
- CVE-2005-3150Format string vulnerability in the Log_Flush function in Wee…
- CVE-2005-3151Buffer overflow in blenderplay in Blender Player 2.37a allow…
- CVE-2005-3152Multiple cross-site scripting (XSS) vulnerabilities in CubeC…
- CVE-2005-3153login.php in myBloggie 2.1.3 beta and earlier allows remote …
Are you affected by CVE-2005-3147?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST