Lucene search

[email protected]CVE-2004-0283

HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0283

2004-11-2305:00:00

[email protected]

web.nvd.nist.gov

cve-2004-0283

mailmgr

local file overwrite

symlink attack

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, or (3) /tmp/mailmgr.sort.

Affected configurations

NVD

Node

mailmgrmailmgrMatch1.2.3

CPENameOperatorVersion
mailmgr:mailmgrmailmgreq1.2.3

CPE	Name	Operator	Version
mailmgr:mailmgr	mailmgr	eq	1.2.3

References

marc.info/?l=bugtraq&m=107665013714517&w=2

www.securityfocus.com/bid/9654

exchange.xforce.ibmcloud.com/vulnerabilities/15203

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2004-0283

cvelist1 nvd1