Lucene search
HistorySep 18, 2001 - 4:00 a.m.
CVE-2001-0095
cve-2001-0095
solaris 2.7
solaris 2.8
catman
symlink attack
file overwrite
local users
security vulnerability
6.3 Medium
AI Score
Confidence
High
1.2 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
0.4%
catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.
Affected configurations
Node
sunsunosMatch5.7
ORsunsunosMatch5.8
Related
nvd
nvd
CVE-2001-0095
2001-02-12 05:00:00
cvelist
cvelist
CVE-2001-0095
2001-09-18 04:00:00
cert
cert
Sun Solaris catman creates temporary files insecurely
2001-09-27 00:00:00
6.3 Medium
AI Score
Confidence
High
1.2 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2001-0095