CVEvulnerability

CVE-2004-0559

2.1 LOW Published 2004-10-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-10-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N

Description

The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.

Affected configurations

• usermin usermin 1.000 • usermin usermin 1.010 • usermin usermin 1.020 • usermin usermin 1.030 • usermin usermin 1.040 • usermin usermin 1.051 • usermin usermin 1.060 • usermin usermin 1.070 • usermin usermin 1.080 • webmin webmin 1.0.00 • webmin webmin 1.0.20 • webmin webmin 1.0.50 • webmin webmin 1.0.60 • webmin webmin 1.0.70 • webmin webmin 1.0.80 • webmin webmin 1.0.90 • webmin webmin 1.1.00 • webmin webmin 1.1.10 • webmin webmin 1.1.21 • webmin webmin 1.1.30 • webmin webmin 1.1.40 • webmin webmin 1.1.50 • mandrakesoft mandrake linux 9.2 • mandrakesoft mandrake linux 10.0 • mandrakesoft mandrake linux corporate server 2.1

References