CVE-2005-3148 json
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovere…
published 2005-10-05 21 y ago modified 2026-06-16 4 mo ago also EUVD-2005-3148
- cvss
- 4.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 32%
- public exploits
- 0
- none known
Summary
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could cause files to be restored with incorrect ownership.
Patch / fix
- storebackup Debian 14, Debian 13, Debian 12 1.19-1
debian advisories DEBIAN-CVE-2005-3148
Exploit prediction
0.38% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
-
sourceforge.net
/project/shownotes.php?release_id=352676
patch, vendor-advisory
-
us.debian.org
/security/2006/dsa-1022
vendor-advisory
-
securityfocus.com
/advisories/9384
vendor-advisory
- bugs.debian.org /cgi-bin/bugreport.cgi?bug=332434
-
secunia.com
/advisories/19489
third-party-advisory
-
secunia.com
/advisories/17025
third-party-advisory
Sources
- CVE List CVE-2005-3148
- NVD CVE-2005-3148
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.