Lucene search

K
cve[email protected]CVE-2001-0139
HistoryMay 07, 2001 - 4:00 a.m.

CVE-2001-0139

2001-05-0704:00:00
web.nvd.nist.gov
25
cve-2001-0139
inn
2.2.3
local users
symlink attack
arbitrary files
overwrite
nvd

1.2 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

Affected configurations

NVD
Node
calderaopenlinux_desktopMatch2.3
OR
immuniximmunixMatch7.0_beta
Node
calderaopenlinux_edesktopMatch2.4
OR
calderaopenlinux_eserverMatch2.3
OR
debiandebian_linuxMatch2.2
OR
debiandebian_linuxMatch2.268k
OR
debiandebian_linuxMatch2.2alpha
OR
debiandebian_linuxMatch2.2arm
OR
debiandebian_linuxMatch2.2sparc
OR
mandrakesoftmandrake_linuxMatch6.0
OR
mandrakesoftmandrake_linuxMatch6.1
OR
mandrakesoftmandrake_linuxMatch7.0
OR
mandrakesoftmandrake_linuxMatch7.1
OR
mandrakesoftmandrake_linuxMatch7.2
OR
redhatlinuxMatch7.0

1.2 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2001-0139