CVEvulnerability
CVE-2002-2001
1.2 LOW
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.2 LOW — AV:L/AC:H/Au:N/C:N/I:P/A:N
Description
jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.
Affected configurations
• jmcce jmcce 1.3.8
• mandrakesoft mandrake linux 8.1
References
- http://www.iss.net/security_center/static/7980.php Patch
- http://www.mandriva.com/security/advisories?name=MDKSA-2002:008 www.mandriva.com
- http://www.securityfocus.com/bid/3940 Patch
- http://www.iss.net/security_center/static/7980.php Patch
- http://www.mandriva.com/security/advisories?name=MDKSA-2002:008 www.mandriva.com
- http://www.securityfocus.com/bid/3940 Patch