CVE-2005-0071: vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.

Routine

MEDIUM 5.0DOWNGRADE

CVE-2005-0071 is a medium-severity flaw (CVSS 5.0) affecting vdr. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	5.0 (Medium)
EPSS exploit chance	1.4% (top 28%)
CISA exploited list	No
Published	2005-05-02
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: vdr

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2005-05-02 04:00 UTCPublished CVE record published
2026-06-16 22:10 UTCUpdated Record last modified

vdr vdr DOWNGRADE

Affected: 1.0.0 · 1.0.4 · 1.2.0 · 1.2.1 · 1.2.2 · 1.2.5

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.0.0

1. Check installed version

apt-cache policy vdr || rpm -q vdr || vdr --version

2. No fixed release: DOWNGRADE to a release before 1.0.0 (Debian / Ubuntu)

apt-cache madison vdr sudo apt install vdr=<VERSION_BEFORE_1.0.0> sudo apt-mark hold vdr

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list vdr sudo dnf downgrade vdr-<VERSION_BEFORE_1.0.0> sudo dnf versionlock add vdr

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2005-0071?

vdr: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2005-0071 being exploited?

CVE-2005-0071 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2005-0071 affect?

CVE-2005-0071 affects vdr. Severity is medium (CVSS 5.0). vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.

How urgent is CVE-2005-0071?

Priority 35/100. No elevated risk signals yet.

Related CVEs

CVE-2010-3387 MEDIUM 6.9 DOWNGRADE vdrleaktest in Video Disk Recorder (VDR) 1.6.0 places a zero-length directory name in the LD_LIBRARY_PATH, whi
CVE-2008-4985 MEDIUM 6.9 DOWNGRADE vdrleaktest in Video Disk Recorder (aka vdr-dbg or vdr) 1.6.0 allows local users to overwrite arbitrary files

References

← Back to latest CVEs