CVE-2005-0120: helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program.

Security readout for executives and security teams

This is a local privilege-related file-deletion issue in helvis. A user with an account on an affected machine could abuse the setuid elvprsv helper to delete files they should not control. The public record does not show remote exposure, active exploitation, CVSS scoring, or a named patch in the provided sources. Exposure is likely limited to systems with helvis 1.8h2_1 or earlier installed and the elvprsv helper present with setuid behavior. This is not described as remotely reachable. Internet-facing exposure is not supported by the provided sources. Treat this as a legacy local-risk issue. It is unlikely to drive emergency internet-wide response, but it matters on shared Unix systems because unauthorized file deletion can disrupt operations or support privilege-abuse chains. Mitigation focus: Check vendor or operating-system package guidance for helvis remediation.; Remove helvis where it is not business-required.; Upgrade or replace affected helvis packages if a trusted fixed package exists..

Prepared

Jun 30, 2026, 01:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.