Lucene search
MitreCVE-2002-0137HistoryMar 25, 2002 - 5:00 a.m.
CVE-2002-0137
2002-03-2505:00:00
mitre
web.nvd.nist.gov
28
cdrdao
local user
symlink attack
overwrite
configuration file
cve-2002-0137
nvd
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.4
Confidence
High
EPSS
0
Percentile
0.4%
CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.
Affected configurations
Node
andreas_muellercdrdaoMatch1.1.4
ORandreas_muellercdrdaoMatch1.1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| andreas_mueller | cdrdao | 1.1.4 | cpe:2.3:a:andreas_mueller:cdrdao:1.1.4:*:*:*:*:*:*:* |
| andreas_mueller | cdrdao | 1.1.5 | cpe:2.3:a:andreas_mueller:cdrdao:1.1.5:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (1)
2002-01-13 00:00:00
CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (3)
2002-01-13 00:00:00
CDRDAO 1.1.x - Home Directory Configuration File Symbolic Link (4)
2002-01-13 00:00:00
cvelist
cvelist
CVE-2002-0137
2002-03-15 05:00:00
nvd
nvd
CVE-2002-0137
2002-03-25 05:00:00
nessus
nessus
Mandrake Linux Security Advisory : cdrdao (MDKSA-2005:089)
2005-05-19 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.4
Confidence
High
EPSS
0
Percentile
0.4%
Related for CVE-2002-0137