PT-2002-1341 · Gnu · Gnat

Published 2002-05-03 · Updated 2016-10-18 · CVE-2002-0271

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions GNAT versions 3.12p through 3.14p

Description The issue allows local users to modify files of other users via a symlink attack on temporary files. This is related to the runtime library in the GNU Ada compiler.

Recommendations For GNAT versions 3.12p through 3.14p, consider restricting access to temporary files to prevent symlink attacks until a patch is available. As a temporary workaround, avoid using the runtime library for file operations that involve temporary files.

Fix

Related Identifiers

CVE-2002-0271

Affected Products

Gnat

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2002-0271 · Security Note
• http://securityfocus.com/bid/4086 · Note
• http://marc.info/?l=bugtraq&m=101353440624007&w=2 · Note