PT-2003-1003 · Semi+1 · Semi Mime Library+1

Publicado 2003-07-10 · Atualizado 2017-10-11 · CVE-2003-0440

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions semi MIME library version 1.14.5 and earlier wemi versions 1.14.0 and earlier

Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files, potentially leading to disruption of confidentiality, integrity, and availability of protected information.

Recommendations For semi MIME library version 1.14.5 and earlier, update to a version later than 1.14.5. For wemi versions 1.14.0 and earlier, update to a version later than 1.14.0. As a temporary workaround, consider restricting access to temporary files to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-01329

CVE-2003-0440

DSA-339

Produtos afetados

Semi Mime Library

Wemi

Referências · 11

• http://redhat.com/support/errata/RHSA-2003-231.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2003-0440 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0440 · Aviso do Fabricante
• http://debian.org/security/2003/dsa-339 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A569 · Nota
• https://bdu.fstec.ru/vul/2015-01329 · Nota de Segurança
• http://debian.org/security/dsa-339 · Nota
• https://security-tracker.debian.org/tracker/CVE-2003-0440 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2003-234.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-0440 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0440 · Nota de Segurança