PT-2000-1624 · Mgetty · Mgetty

Published 2000-10-20 · Updated 2008-09-05 · CVE-2000-0691

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions mgetty (affected versions not specified)

Description The issue allows local users to create or modify arbitrary files via a symlink attack. This is achieved by creating a symlink in /var/spool/fax/outgoing/.last run to the target file, exploiting the faxrunq and faxrunqd in the mgetty package.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0691

Affected Products

Mgetty

References · 6

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-08/0329.html · Exploit
• 🔥 http://securityfocus.com/bid/1612 · Exploit
• 🔥 https://exploit-db.com/exploits/20179 · Exploit
• http://calderasystems.com/support/security/advisories/CSSA-2000-029.0.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0691 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-08/0330.html · Note