3 matches found
CVE-2001-0139
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations...
6.3AI score0.00339EPSS
SaveExploits0References5
CVE-2001-0139
Inn 2.2.3 is vulnerable to a local temporary-file race condition. The root cause is inn creating temporary files in a world-writable directory (or being configured to use one), enabling symlink attacks that may modify files writable by the news user. Mandrake/MDKSA-2001:010 notes a patch that rel...
1.2CVSS6.3AI score0.00339EPSS
SaveExploits0References5Affected Software2
20