Lucene search

K
cveMitreCVE-2002-0157
HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0157

2003-04-0205:00:00
mitre
web.nvd.nist.gov
27
nautilus
cve-2002-0157
local user
symlink attack
metadata file
file overwrite.

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

High

EPSS

0

Percentile

5.1%

Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.

Affected configurations

Nvd
Node
eazelnautilusMatch1.0.4
VendorProductVersionCPE
eazelnautilus1.0.4cpe:2.3:a:eazel:nautilus:1.0.4:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.4

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2002-0157