Lucene search

[email protected]CVE-2001-0109

HistoryMay 07, 2001 - 4:00 a.m.

CVE-2001-0109

2001-05-0704:00:00

[email protected]

web.nvd.nist.gov

cve-2001-0109

suse 7.0

symlink attack

rctmp

local users

overwrite files

nvd

1.2 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file.

Affected configurations

NVD

Node

susesuse_linuxMatch6.1

susesuse_linuxMatch6.2

susesuse_linuxMatch6.3

susesuse_linuxMatch6.4

susesuse_linuxMatch7.0

CPENameOperatorVersion
suse:suse_linuxsuse suse linuxeq6.1
suse:suse_linuxsuse suse linuxeq6.2
suse:suse_linuxsuse suse linuxeq6.3
suse:suse_linuxsuse suse linuxeq6.4
suse:suse_linuxsuse suse linuxeq7.0

CPE	Name	Operator	Version
suse:suse_linux	suse suse linux	eq	6.1
suse:suse_linux	suse suse linux	eq	6.2
suse:suse_linux	suse suse linux	eq	6.3
suse:suse_linux	suse suse linux	eq	6.4
suse:suse_linux	suse suse linux	eq	7.0

References

archives.neohapsis.com/archives/bugtraq/2001-01/0226.html

archives.neohapsis.com/archives/bugtraq/2001-01/0272.html

www.securityfocus.com/bid/2207

exchange.xforce.ibmcloud.com/vulnerabilities/5945

1.2 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2001-0109

cvelist1 nvd1