PT-2001-1992 · Pcp · Performance Co-Pilot

Publicado

2001-12-06

·

Atualizado

2017-10-10

·

CVE-2001-0823

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Performance Co-Pilot (PCP) versions prior to 2.2.1-3
Description The issue allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory. This is achieved by exploiting the pmpost program.
Recommendations For versions prior to 2.2.1-3, update to version 2.2.1-3 or later to resolve the issue. As a temporary workaround, consider restricting access to the NOTICES file in the PCP log directory to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2001-0823

Produtos afetados

Performance Co-Pilot