CVE-2005-2211

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jul 11, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-22126.4Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read tCVE-2005-22137.5Buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary codeCVE-2005-22144.6apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive informationCVE-2005-22154.3Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arCVE-2005-22167.5PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary cCVE-2005-22175.0Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obtCVE-2005-22187.2The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hCVE-2005-22194.6Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, viaCVE-2005-22205.0Dragonfly Commerce allows remote attackers to change a product price by modifying the x_DragonflyCartProductPrice hidden field to (1) dc_CatCVE-2005-22217.5Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements and possibly execute arbitraryCVE-2005-222210.0Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors.CVE-2005-22235.0Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a d
CVE-2005-2211: Medium severity, CVSS 4.6 | Vulnix