Lucene search

MitreCVE-2002-0210

HistoryMay 16, 2002 - 4:00 a.m.

CVE-2002-0210

2002-05-1604:00:00

mitre

web.nvd.nist.gov

tolis group

backup and restore utility

bru 17.0

symlink attack

vulnerability

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

High

EPSS

Percentile

0.4%

JSON

setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file.

Affected configurations

Nvd

Node

tolis_groupbruMatch17.0

VendorProductVersionCPE
tolis_groupbru17.0cpe:2.3:a:tolis_group:bru:17.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tolis_group	bru	17.0	cpe:2.3:a:tolis_group:bru:17.0:::::::*

References

online.securityfocus.com/archive/1/252614

www.iss.net/security_center/static/8003.php

www.securityfocus.com/bid/3970

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

High

EPSS

Percentile

0.4%

JSON

Related for CVE-2002-0210