PT-2001-2312 · Samsung · Samsung Ml-85G Gdi Printer Driver

Published 2001-07-17 · Updated 2017-10-10 · CVE-2001-1177

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samsung ML-85G GDI printer driver versions prior to 0.2.0

Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files. This is related to the ml85p in the Samsung ML-85G GDI printer driver.

Recommendations For versions prior to 0.2.0, update to version 0.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the temporary files used by the ml85p to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-1177

Affected Products

Samsung Ml-85G Gdi Printer Driver

References · 7

• 🔥 https://exploit-db.com/exploits/20999 · Exploit
• 🔥 https://exploit-db.com/exploits/21000 · Exploit
• 🔥 https://exploit-db.com/exploits/21001 · Exploit
• 🔥 http://securityfocus.com/bid/3008 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2001-07/0284.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1177 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6845 · Note