Lucene search

[email protected]CVE-2001-0116

HistoryMar 12, 2001 - 5:00 a.m.

CVE-2001-0116

2001-03-1205:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0116

gpm 1.19.3

symlink attack

local users

file overwrite

nvd

6.5 Medium

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.

CPENameOperatorVersion
immunix:immuniximmunixeq7.0_beta
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.2
redhat:linuxredhat linuxeq7.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.1
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq6.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq6.1

CPE	Name	Operator	Version
immunix:immunix	immunix	eq	7.0_beta
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.2
redhat:linux	redhat linux	eq	7.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.1
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	6.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	6.1

References

marc.info/?l=bugtraq&m=97916374410647&w=2

www.linux-mandrake.com/en/security/2001/MDKSA-2001-006.php3

www.securityfocus.com/bid/2188

exchange.xforce.ibmcloud.com/vulnerabilities/5917

6.5 Medium

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

Related for CVE-2001-0116

cert1 nessus1