CVE-2005-4802

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-31 · updated 2026-06-16

Description

Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on temporary files. NOTE: the raw source referenced an incorrect candidate number; this is the correct number to use.

Affected products

Flexbackup: through 1.2.1

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334350
http://marc.info/?l=bugtraq&m=112958392512513&w=2
http://secunia.com/advisories/17209
http://secunia.com/advisories/23008
http://securitytracker.com/id?1015068
http://www.debian.org/security/2006/dsa-1216
http://www.zataz.net/adviso/flexbackup-09192005.txt
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=334350
http://marc.info/?l=bugtraq&m=112958392512513&w=2
http://secunia.com/advisories/17209
http://secunia.com/advisories/23008
http://securitytracker.com/id?1015068

Get alerted when CVE-2005-4802 or the next vulnerability affects your stack