Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2001-0143

Overview
Vulnerability Score	1.2
CVE Id	CVE-2001-0143
Last Modified	10 Sep 2008 03:07:19
Published	12 Mar 2001 12:00:00
Confidentiality Impact	NONE
Integrity Impact	PARTIAL
Availability Impact	NONE
Access Vector	LOCAL
Access Complexity	HIGH
Authentication	NONE

CVE-2001-0143

Summary

vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.

Vulnerable Systems

Operating System

• Redhat Linux 7.0

Application

• Immunix 7.0 Beta

References

BID - 2186

MANDRAKE - MDKSA-2001:011

XF - linuxconf-vpop3d-symlink(5923)

BUGTRAQ - 20010110 Immunix OS Security update for lots of temp file problems