CVE-2005-4772: Suse Linux

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013.

Affected products

• Suse Suse Linux: version 1.0 only; version 8 only; version 8.0 only; version 8.2 only; version 9.0 only; version 9.1 only; …
• Suse Suse Linux Openexchange Server: version 4.0 only
• Suse Suse Linux School Server: version gold only
• Suse Suse Linux Standard Server: version 8.0 only
• Suse Suse Sled Beagle: version 10.0 only

Published 2005-12-31. Last modified 2026-06-16.