Lucene search

[email protected]CVE-2001-0625

HistoryAug 22, 2001 - 4:00 a.m.

CVE-2001-0625

2001-08-2204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

computer associates

inoculateit 6.0

local attacker

symlink attack

arbitrary files

7.2 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log .

CPENameOperatorVersion
broadcom:inoculateitbroadcom inoculateiteq6.0

CPE	Name	Operator	Version
broadcom:inoculateit	broadcom inoculateit	eq	6.0

References

archives.neohapsis.com/archives/bugtraq/2001-05/0245.html

www.osvdb.org/1843

www.securityfocus.com/bid/2778

exchange.xforce.ibmcloud.com/vulnerabilities/6607

Social References

7.2 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON