What’s Vulnerable › Vulnerabilities

CVE-2005-3268

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-10-20 · updated 2026-06-16

Description

yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files.

Affected products

• Raphael Bossek Yiff Server: 2.14.2.7

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334616
• http://secunia.com/advisories/17242
• http://www.osvdb.org/20074
• http://www.securityfocus.com/bid/15140
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334616
• http://secunia.com/advisories/17242
• http://www.osvdb.org/20074
• http://www.securityfocus.com/bid/15140

Get alerted when CVE-2005-3268 or the next vulnerability affects your stack