Unscored DSA-835-1 2 CVEs

cfengine - insecure temporary files

Published Oct 1, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.0	cfengine	1.6.3-9woody1
Debian · 3.1	cfengine	1.6.5-1sarge1

Vulnerabilities 2

Unscored —

CVE-2005-2960

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used …

Oct 5, 2005
Unscored —

CVE-2005-3137

The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a sy…

Oct 5, 2005