Lucene search
HistoryOct 20, 2004 - 4:00 a.m.
CVE-2004-0559
cve-2004-0559
usermin 1.070
usermin 1.080
symlink attack
nvd
6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.3%
The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.
Related
openvas
openvas
FreeBSD Ports: webmin
2008-09-04 00:00:00
Debian Security Advisory DSA 544-1 (webmin)
2008-01-17 00:00:00
FreeBSD Ports: webmin
2008-09-04 00:00:00
nessus
nessus
osv
osv
webmin - insecure temporary directory
2004-09-14 00:00:00
debian
debian
[SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory
2004-09-14 14:58:12
[SECURITY] [DSA 544-1] New webmin packages fix insecure temporary directory
2004-09-14 14:58:12
freebsd
freebsd
webmin -- insecure temporary file creation at installation time
2004-09-05 00:00:00
ubuntucve
ubuntucve
CVE-2004-0559
2004-10-20 00:00:00
gentoo
gentoo
Webmin, Usermin: Multiple vulnerabilities in Usermin
2004-09-12 00:00:00
6 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2004-0559