CVE-2005-3148

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-10-05 · updated 2026-06-16

Description

StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership.

Affected products

Storebackup: 1.1, 1.2, 1.3, 1.4, 1.5, 1.6 (+23)
Suse Linux: all versions

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434
http://secunia.com/advisories/17025
http://secunia.com/advisories/19489
http://sourceforge.net/project/shownotes.php?release_id=352676
http://www.securityfocus.com/advisories/9384
http://www.us.debian.org/security/2006/dsa-1022
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332434
http://secunia.com/advisories/17025
http://secunia.com/advisories/19489
http://sourceforge.net/project/shownotes.php?release_id=352676
http://www.securityfocus.com/advisories/9384
http://www.us.debian.org/security/2006/dsa-1022

Get alerted when CVE-2005-3148 or the next vulnerability affects your stack