PT-2001-1173 · Elvis Tiny · Elvis-Tiny

Published 2001-01-09 · Updated 2017-10-10 · CVE-2000-1136

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions elvis-tiny versions prior to 1.4-10

Description The issue allows local users to overwrite files of other users via a symlink attack.

Recommendations For versions prior to 1.4-10, update to version 1.4-10 or later to resolve the issue.

Fix

Related Identifiers

CVE-2000-1136

Affected Products

Elvis-Tiny

References · 4

• http://securityfocus.com/bid/1984 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1136 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5632 · Note
• http://marc.info/?l=bugtraq&m=97502995616099&w=2 · Note