CVE-2001-0529 — Openssh vulnerability

3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.2%
top 62.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Openbsd Openssh
Timeline
PublishedAug 14
Latest updateMay 3

Description

OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: ftp.netbsd.org ↗Patch: www.securityfocus.com ↗Patch: ftp.netbsd.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-4224-q4g2-3wx3: OpenSSH version 2↗2022-05-03
▶
CVEList
CVE-2001-0529: OpenSSH version 2↗2002-03-09
▶
CVE-2001-0529 — Openbsd Openssh vulnerability | cvebase