Lucene search

[email protected]CVE-2002-1838

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-1838

2022-10-0316:23:48

[email protected]

web.nvd.nist.gov

cve-2002-1838

charities.cron

symlink attack

local users

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary files.

Affected configurations

NVD

Node

steve_sachscharities.cronMatch1.0.2

steve_sachscharities.cronMatch1.1.1

steve_sachscharities.cronMatch1.5.0

steve_sachscharities.cronMatch1.6.0

CPENameOperatorVersion
steve_sachs:charities.cronsteve sachs charities.croneq1.0.2
steve_sachs:charities.cronsteve sachs charities.croneq1.1.1
steve_sachs:charities.cronsteve sachs charities.croneq1.5.0
steve_sachs:charities.cronsteve sachs charities.croneq1.6.0

CPE	Name	Operator	Version
steve_sachs:charities.cron	steve sachs charities.cron	eq	1.0.2
steve_sachs:charities.cron	steve sachs charities.cron	eq	1.1.1
steve_sachs:charities.cron	steve sachs charities.cron	eq	1.5.0
steve_sachs:charities.cron	steve sachs charities.cron	eq	1.6.0

References

www.securityfocus.com/bid/4869

www.stevesachs.com/charities.cron_CHANGELOG

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Related for CVE-2002-1838

nvd1 cvelist1