Lucene search
HistoryMay 18, 2001 - 4:00 a.m.
CVE-2001-1346
cve-2001-1346
arcserveit
symlink attack
overwrite arbitrary files
temporary files
asagent.tmp
inetd.tmp.
7.2 High
AI Score
Confidence
Low
1.2 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
29.5%
Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ca:arcserve_backup | ca arcserve backup | eq | 6.63 |
| broadcom:arcserve_backup | broadcom arcserve backup | eq | 6.61 |
7.2 High
AI Score
Confidence
Low
1.2 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
29.5%
Related for CVE-2001-1346