PT-2003-1914 · Suse · Suseconfig.Susewm+2

Stefan Nordhausen · Publicado 2003-10-09 · Atualizado 2016-10-18 · CVE-2003-0847

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions susewm package on SuSE Linux 8.2 Pro

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file, which is created by SuSEconfig.susewm. This could potentially lead to unauthorized access or modification of system files.

Recommendations For susewm package on SuSE Linux 8.2 Pro, consider restricting access to the SuSEconfig.susewm script until a fix is available, and avoid using the script with elevated privileges to minimize potential damage from a symlink attack.

Exploit

Correção

Identificadores relacionados

CVE-2003-0847

Produtos afetados

Suse Linux

Suseconfig.Susewm

Susewm

Referências · 4

• 🔥 https://exploit-db.com/exploits/23223 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0847 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=106546531922379&w=2 · Nota
• http://marc.info/?l=bugtraq&m=106545972615578&w=2 · Nota