PT-2001-2262 · Xmcd · Xmcd

Publicado 2001-08-03 · Atualizado 2017-10-10 · CVE-2001-1119

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xmcd versions 2.6 through 3.0.2

Description The issue allows local users to overwrite arbitrary files via a symlink attack.

Recommendations For versions 2.6 through 3.0.2, consider restricting access to the cda function in xmcd to prevent a symlink attack until a patch is available.

Correção

Identificadores relacionados

CVE-2001-1119

Produtos afetados

Xmcd

Referências · 5

• http://novell.com/linux/security/advisories/2001_025_xmcd_txt.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1119 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6941 · Nota
• http://kb.cert.org/vuls/id/105347 · Correção
• http://securityfocus.com/bid/3148 · Aviso do Fabricante