Every CVE Search/ Get API key

CVE-2005-2672

pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users...

2.1 LowFix available

pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.

Exploit likelihood

0.43%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.

Record
CVE-2005-2672
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.

Record
CVE-2005-2672
Updated
2026-11-02
EUVDEUVD-2005-2673 No score

pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.

Record
EUVD-2005-2673
Updated
2026-11-03
GitHub AdvisoriesGHSA-j7c4-q8wj-hjhf No score

pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users...

pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.

Record
GHSA-j7c4-q8wj-hjhf
Updated
2026-11-02
OSV No score

pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.

Record
CVE-2005-2672
Updated
2026-11-02
OSVDEBIAN-CVE-2005-2672 No score

pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.

Record
DEBIAN-CVE-2005-2672
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
lm-sensors
Debian:12
before 1:2.9.1-7
1:2.9.1-7
lm-sensors
Debian:13
before 1:2.9.1-7
1:2.9.1-7
lm-sensors
Debian:14
before 1:2.9.1-7
1:2.9.1-7
lm-sensors
Debian:3.1
before 1:2.9.1-1sarge2, plus listed versions
1:2.9.1-11:2.9.1-1sarge1
1:2.9.1-1sarge2
lm-sensors
Debian:4.0
before 1:2.9.1-6etch1
1:2.9.1-6etch1
lm_sensors
Red Hat:enterprise_linux:4::as
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
lm_sensors-debuginfo
Red Hat:enterprise_linux:4::as
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
lm_sensors-devel
Red Hat:enterprise_linux:4::as
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
lm_sensors
Red Hat:enterprise_linux:4::desktop
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
lm_sensors-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
Show 7 moreShow less
Affected packages
PackageAffectedFixed
lm_sensors-devel
Red Hat:enterprise_linux:4::desktop
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
lm_sensors
Red Hat:enterprise_linux:4::es
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
lm_sensors-debuginfo
Red Hat:enterprise_linux:4::es
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
lm_sensors-devel
Red Hat:enterprise_linux:4::es
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
lm_sensors
Red Hat:enterprise_linux:4::ws
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
lm_sensors-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3
lm_sensors-devel
Red Hat:enterprise_linux:4::ws
before 0:2.8.7-2.40.3
0:2.8.7-2.40.3

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2672 is a low vulnerability (CVSS 2.1) in Lm Sensors Sensors, published August 23, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in lm-sensors 1:2.9.1-7.

References

Show 17 moreShow less
MoveEnter Open