PT-2003-1055 · Ibm · Internet Message

Publicado 2003-01-08 · Atualizado 2008-09-10 · CVE-2002-1395

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Internet Message versions 141-18 and earlier

Description The issue allows local users to obtain unauthorized directory permissions and overwrite or create arbitrary files. This is due to the use of predictable file and directory names. There is a potential risk of integrity violation of protected information. The exploitation of this issue can be performed locally.

Recommendations For Internet Message versions 141-18 and earlier, consider restricting access to temporary directories used by impwagent and immknmz to minimize the risk of unauthorized directory permissions and arbitrary file creation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-07842

CVE-2002-1395

DSA-202

Produtos afetados

Internet Message

Referências · 13

• https://rhn.redhat.com/errata/RHSA-2003-039.html · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1395 · Aviso do Fabricante
• http://secunia.com/advisories/8242 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1395 · Nota de Segurança
• http://iss.net/security_center/static/10766.php · Nota
• http://secunia.com/advisories/8166 · Nota
• http://debian.org/security/2002/dsa-202 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2003-039.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-07842 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2002-1395 · Aviso do Fabricante
• http://iss.net/security_center/static/10767.php · Nota
• https://osv.dev/vulnerability/CVE-2002-1395 · Aviso do Fabricante
• http://securityfocus.com/bid/6307 · Nota