PT-2003-1055 · Ibm · Internet Message

Published 2003-01-08 · Updated 2008-09-10 · CVE-2002-1395

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Internet Message versions 141-18 and earlier

Description The issue allows local users to obtain unauthorized directory permissions and overwrite or create arbitrary files. This is due to the use of predictable file and directory names. There is a potential risk of integrity violation of protected information. The exploitation of this issue can be performed locally.

Recommendations For Internet Message versions 141-18 and earlier, consider restricting access to temporary directories used by impwagent and immknmz to minimize the risk of unauthorized directory permissions and arbitrary file creation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-07842

CVE-2002-1395

DSA-202

Affected Products

Internet Message

References · 13

• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1395 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1395 · Security Note
• http://debian.org/security/2002/dsa-202 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-039.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07842 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2002-1395 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2002-1395 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2003-039.html · Note
• http://secunia.com/advisories/8242 · Note
• http://iss.net/security_center/static/10766.php · Note
• http://secunia.com/advisories/8166 · Note
• http://iss.net/security_center/static/10767.php · Note
• http://securityfocus.com/bid/6307 · Note