Lucene search

[email protected]CVE-2001-0120

HistoryMar 12, 2001 - 5:00 a.m.

CVE-2001-0120

2001-03-1205:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0120

shadow-utils

useradd

symlink attack

local users

nvd

arbitrary file overwrite.

6.5 Medium

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.

CPENameOperatorVersion
immunix:immuniximmunixeq7.0_beta
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.2
redhat:linuxredhat linuxeq7.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.1
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq6.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq6.1

CPE	Name	Operator	Version
immunix:immunix	immunix	eq	7.0_beta
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.2
redhat:linux	redhat linux	eq	7.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.1
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	6.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	6.1

References

marc.info/?l=bugtraq&m=97916374410647&w=2

www.linux-mandrake.com/en/security/2001/MDKSA-2001-007.php3

www.securityfocus.com/bid/2196

exchange.xforce.ibmcloud.com/vulnerabilities/5927

6.5 Medium

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

Related for CVE-2001-0120

nessus1 cert1