Unscored DSA-836-1 2 CVEs

cfengine2 - insecure temporary files

Published Oct 1, 2005 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.1	cfengine2	2.1.14-1sarge1

Vulnerabilities 2

Unscored —

CVE-2005-2960

cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used …

Oct 5, 2005
Unscored —

CVE-2005-3137

The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a sy…

Oct 5, 2005