PT-1998-1130 · Cops · Cops
Published
1998-06-26
·
Updated
2016-10-18
·
CVE-1999-1036
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
COPS version 1.04
Description
The issue allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res diff, (2) ca.src, and (3) mail.chk.
Recommendations
For version 1.04, consider restricting access to the temporary files res diff, ca.src, and mail.chk to prevent a symlink attack until a patch is available.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Cops