Lucene search
HistorySep 01, 2004 - 4:00 a.m.
CVE-2002-1502
cve-2002-1502
symbolic link vulnerability
xbreaky
local users
arbitrary files
symlink
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user’s .breakyhighscores file to the target file.
Affected configurations
Node
dave_brulxbreakyMatch0.0.3
ORdave_brulxbreakyMatch0.0.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| dave_brul:xbreaky | dave brul xbreaky | eq | 0.0.3 |
| dave_brul:xbreaky | dave brul xbreaky | eq | 0.0.4 |
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2002-1502