faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp. temporary file...
6.9CVSS6.7AI score0.00415EPSS
SaveExploits1References3
Debian CVE•added 2004/09/01 4:0 a.m.•47 views
CVE-2002-1392
faxspool in mgetty before 1.1.29 uses a world-writable spool directory for outgoing faxes, which allows local users to modify fax transmission privileges...
