Lucene search

[email protected]CVE-2001-0140

HistoryMar 12, 2001 - 5:00 a.m.

CVE-2001-0140

2001-03-1205:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0140

arpwatch

file overwrite

local user

symlink attack

security vulnerability

6.5 Medium

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

CPENameOperatorVersion
immunix:immuniximmunixeq7.0_beta
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.2
redhat:linuxredhat linuxeq7.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq7.1
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq6.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq6.1

CPE	Name	Operator	Version
immunix:immunix	immunix	eq	7.0_beta
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.2
redhat:linux	redhat linux	eq	7.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	7.1
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	6.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	6.1

References

marc.info/?l=bugtraq&m=97916374410647&w=2

www.linux-mandrake.com/en/security/2001/MDKSA-2001-002.php3

www.securityfocus.com/bid/2183

exchange.xforce.ibmcloud.com/vulnerabilities/5922

6.5 Medium

AI Score

Confidence

Low

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

Related for CVE-2001-0140

nessus1