PT-2002-1341 · Gnu · Gnat

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0271

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions GNAT versions 3.12p through 3.14p

Description The issue allows local users to modify files of other users via a symlink attack on temporary files. This is related to the runtime library in the GNU Ada compiler.

Recommendations For GNAT versions 3.12p through 3.14p, consider restricting access to temporary files to prevent symlink attacks until a patch is available. As a temporary workaround, avoid using the runtime library for file operations that involve temporary files.

Correção

Identificadores relacionados

CVE-2002-0271

Produtos afetados

Gnat

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2002-0271 · Nota de Segurança
• http://securityfocus.com/bid/4086 · Nota
• http://marc.info/?l=bugtraq&m=101353440624007&w=2 · Nota