CVE-2005-2672
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users...
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.
Exploit likelihood
What each source reports
NVD Score used
2.1
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.
- Record
CVE-2005-2672- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.
- Record
CVE-2005-2672- Updated
- 2026-11-02
EUVDEUVD-2005-2673 No score
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.
- Record
EUVD-2005-2673- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j7c4-q8wj-hjhf No score
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users...
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.
- Record
GHSA-j7c4-q8wj-hjhf- Updated
- 2026-11-02
OSV No score
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.
- Record
CVE-2005-2672- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2672 No score
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.
- Record
DEBIAN-CVE-2005-2672- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
lm-sensorsDebian:12 |
before 1:2.9.1-7 | 1:2.9.1-7 |
lm-sensorsDebian:13 |
before 1:2.9.1-7 | 1:2.9.1-7 |
lm-sensorsDebian:14 |
before 1:2.9.1-7 | 1:2.9.1-7 |
lm-sensorsDebian:3.1 |
before 1:2.9.1-1sarge2, plus listed versions 1:2.9.1-11:2.9.1-1sarge1 |
1:2.9.1-1sarge2 |
lm-sensorsDebian:4.0 |
before 1:2.9.1-6etch1 | 1:2.9.1-6etch1 |
lm_sensorsRed Hat:enterprise_linux:4::as |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
lm_sensors-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
lm_sensors-develRed Hat:enterprise_linux:4::as |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
lm_sensorsRed Hat:enterprise_linux:4::desktop |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
lm_sensors-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
lm_sensors-develRed Hat:enterprise_linux:4::desktop |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
lm_sensorsRed Hat:enterprise_linux:4::es |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
lm_sensors-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
lm_sensors-develRed Hat:enterprise_linux:4::es |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
lm_sensorsRed Hat:enterprise_linux:4::ws |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
lm_sensors-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
lm_sensors-develRed Hat:enterprise_linux:4::ws |
before 0:2.8.7-2.40.3 | 0:2.8.7-2.40.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2672 is a low vulnerability (CVSS 2.1) in Lm Sensors Sensors, published August 23, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in lm-sensors 1:2.9.1-7.
References
secure.netroedge.com/~lm78/cvs/lm_sensors2/CHANGES
bugs.debian.org/cgi-bin/bugreport.cgi?bug=324193
securitytracker.com/id?1015180
usn.ubuntu.com/172-1
secunia.com/advisories/17535
secunia.com/advisories/16501
Show 17 moreShow less
redhat.com/support/errata/RHSA-2005-825.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9993
securityfocus.com/bid/14624
mandriva.com/security/advisories?name=MDKSA-2005:149
secunia.com/advisories/17499
vupen.com/english/advisories/2005/1492
debian.org/security/2005/dsa-814
nvd.nist.gov/vuln/detail/CVE-2005-2672
github.com/advisories/GHSA-j7c4-q8wj-hjhf
security-tracker.debian.org/tracker/CVE-2005-2672
access.redhat.com/errata/RHSA-2005:825
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=166672
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_825.json
access.redhat.com/security/cve/CVE-2005-2672
bugzilla.redhat.com/show_bug.cgi?id=1617739
cve.org/CVERecord?id=CVE-2005-2672