Lucene search

MitreCVE-2001-1092

HistoryMar 15, 2002 - 5:00 a.m.

CVE-2001-1092

2002-03-1505:00:00

mitre

web.nvd.nist.gov

digital unix

cve-2001-1092

security vulnerability

symlink attack

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

Percentile

0.4%

JSON

msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.

Affected configurations

Nvd

Node

compaqtru64Match4.0d

compaqtru64Match4.0e

compaqtru64Match4.0f

compaqtru64Match4.0g

VendorProductVersionCPE
compaqtru644.0dcpe:2.3:o:compaq:tru64:4.0d:*:*:*:*:*:*:*
compaqtru644.0ecpe:2.3:o:compaq:tru64:4.0e:*:*:*:*:*:*:*
compaqtru644.0fcpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*
compaqtru644.0gcpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
compaq	tru64	4.0d	cpe:2.3:o:compaq:tru64:4.0d:::::::*
compaq	tru64	4.0e	cpe:2.3:o:compaq:tru64:4.0e:::::::*
compaq	tru64	4.0f	cpe:2.3:o:compaq:tru64:4.0f:::::::*
compaq	tru64	4.0g	cpe:2.3:o:compaq:tru64:4.0g:::::::*

References

www.kb.cert.org/vuls/id/440539

www.securityfocus.com/archive/1/213238

www.securityfocus.com/bid/3320

exchange.xforce.ibmcloud.com/vulnerabilities/7102

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

Percentile

0.4%

JSON

Related for CVE-2001-1092