CVE-2001-0138 — Linux vulnerability

3 documents3 sources
Severity
1.2LOWNVD
EPSS
0.1%
top 77.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Debian LinuxImmunixMandrakesoft Mandrake Linux+2 more
Timeline
PublishedMar 12
Latest updateApr 30

Description

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.

CVSS vector

AV:L/AC:H/C:N/I:P/A:NExploitability: 1.9 | Impact: 2.9

Affected Packages4 packages

▶NVDredhat/linux7.0
▶NVDimmunix/immunix7.0_beta
▶NVDmandrakesoft/mandrake_linux5 versions+4

Also affects: Debian Linux 2.2

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-8v2v-3g3x-fvg3: privatepw program in wu-ftpd before 2↗2022-04-30
▶
CVEList
CVE-2001-0138: privatepw program in wu-ftpd before 2↗2001-05-07
▶
CVE-2001-0138 — Debian Linux vulnerability | cvebase