PT-2003-1913 · Suse · Javarunt+1

Stefan Nordhausen · Publicado 2003-10-09 · Atualizado 2016-10-18 · CVE-2003-0846

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SuSE Linux version 7.3Pro

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the .java wrapper temporary file, which is created by SuSEconfig.javarunt in the javarunt package.

Recommendations For SuSE Linux version 7.3Pro, consider restricting access to the javarunt package to minimize the risk of exploitation. As a temporary workaround, avoid using SuSEconfig.javarunt until a patch is available.

Correção

Identificadores relacionados

CVE-2003-0846

Produtos afetados

Suse Linux

Javarunt

Referências · 3

• http://marc.info/?l=bugtraq&m=106546177518140&w=2 · Nota
• http://marc.info/?l=bugtraq&m=106546531922379&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0846 · Nota de Segurança