PT-2003-1914 · Suse · Suseconfig.Susewm+2

Stefan Nordhausen · Published 2003-10-09 · Updated 2016-10-18 · CVE-2003-0847

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions susewm package on SuSE Linux 8.2 Pro

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file, which is created by SuSEconfig.susewm. This could potentially lead to unauthorized access or modification of system files.

Recommendations For susewm package on SuSE Linux 8.2 Pro, consider restricting access to the SuSEconfig.susewm script until a fix is available, and avoid using the script with elevated privileges to minimize potential damage from a symlink attack.

Exploit

Fix

Related Identifiers

CVE-2003-0847

Affected Products

Suse Linux

Suseconfig.Susewm

Susewm

References · 4

• 🔥 https://exploit-db.com/exploits/23223 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0847 · Security Note
• http://marc.info/?l=bugtraq&m=106546531922379&w=2 · Note
• http://marc.info/?l=bugtraq&m=106545972615578&w=2 · Note