PT-2001-2262 · Xmcd · Xmcd

Published 2001-08-03 · Updated 2017-10-10 · CVE-2001-1119

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xmcd versions 2.6 through 3.0.2

Description The issue allows local users to overwrite arbitrary files via a symlink attack.

Recommendations For versions 2.6 through 3.0.2, consider restricting access to the cda function in xmcd to prevent a symlink attack until a patch is available.

Fix

Related Identifiers

CVE-2001-1119

Affected Products

Xmcd

References · 5

• http://novell.com/linux/security/advisories/2001_025_xmcd_txt.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1119 · Security Note
• http://kb.cert.org/vuls/id/105347 · Patch
• http://securityfocus.com/bid/3148 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6941 · Note