PT-2000-1000 · Gnu · Ed

Publicado

2000-12-06

·

Atualizado

2018-05-03

·

CVE-2000-1137

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions ed versions prior to 0.2-18.1
Description The issue allows local users to overwrite the files of other users via a symlink attack, potentially leading to violations of confidentiality, integrity, and availability of protected information. This can be exploited by a local attacker.
Recommendations For versions prior to 0.2-18.1, update to version 0.2-18.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ed package to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-03573
BDU:2015-07793
CVE-2000-1137

Produtos afetados

Ed