PT-2001-2404 · Ispell · Ispell

Published 2001-06-21 · Updated 2016-10-18 · CVE-2001-1276

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: ispell versions prior to 3.1.20

Description: The issue allows local users to overwrite files of other users via a symlink attack on a temporary file.

Recommendations: For versions prior to 3.1.20, update to version 3.1.20 or later to resolve the issue.

Fix

Related Identifiers

CVE-2001-1276

Affected Products

Ispell

References · 5

• http://linux-mandrake.com/en/security/2001/MDKSA-2001-058.php3 · Vendor Advisory
• http://download.immunix.org/ImmunixOS/6.2/updates/IMNX-2001-62-004-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1276 · Security Note
• http://redhat.com/support/errata/RHSA-2001-074.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=99317439131174&w=2 · Note