Unrated severityNVD Advisory· Published Oct 5, 2005· Updated Jun 16, 2026
CVE-2005-3137
CVE-2005-3137
Description
The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2005-2960.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=1.6.5
Patches
Vulnerability mechanics
References
13- www.debian.org/security/2005/dsa-835nvdPatchVendor Advisory
- www.debian.org/security/2005/dsa-836nvdPatchVendor Advisory
- secunia.com/advisories/17037/nvdVendor Advisory
- bugs.gentoo.org/show_bug.cginvd
- groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0nvd
- secunia.com/advisories/17038nvd
- secunia.com/advisories/17040nvd
- secunia.com/advisories/17142nvd
- secunia.com/advisories/17182nvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/bid/14994nvd
- www.ubuntu.com/usn/usn-198-1nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/22489nvd
News mentions
0No linked articles in our index yet.