CVE-2001-0120 — Immunix vulnerability

3 documents3 sources
Severity
1.2LOWNVD
EPSS
0.1%
top 79.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
ImmunixMandrakesoft Mandrake LinuxRedhat Linux
Timeline
PublishedMar 12
Latest updateApr 30

Description

useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.

CVSS vector

AV:L/AC:H/C:N/I:P/A:NExploitability: 1.9 | Impact: 2.9

Affected Packages3 packages

▶NVDredhat/linux7.0
▶NVDimmunix/immunix7.0_beta
▶NVDmandrakesoft/mandrake_linux5 versions+4

Patches

Patch: www.linux-mandrake.com ↗Patch: www.securityfocus.com ↗Patch: www.linux-mandrake.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2f5w-wx6g-q5g3: useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack↗2022-04-30
▶
CVEList
CVE-2001-0120: useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack↗2001-05-07
▶