PT-2003-1913 · Suse · Javarunt+1

Stefan Nordhausen · Published 2003-10-09 · Updated 2016-10-18 · CVE-2003-0846

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SuSE Linux version 7.3Pro

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the .java wrapper temporary file, which is created by SuSEconfig.javarunt in the javarunt package.

Recommendations For SuSE Linux version 7.3Pro, consider restricting access to the javarunt package to minimize the risk of exploitation. As a temporary workaround, avoid using SuSEconfig.javarunt until a patch is available.

Fix

Related Identifiers

CVE-2003-0846

Affected Products

Suse Linux

Javarunt

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2003-0846 · Security Note
• http://marc.info/?l=bugtraq&m=106546177518140&w=2 · Note
• http://marc.info/?l=bugtraq&m=106546531922379&w=2 · Note