Lucene search

K
cve[email protected]CVE-2002-0334
HistoryJun 25, 2002 - 4:00 a.m.

CVE-2002-0334

2002-06-2504:00:00
web.nvd.nist.gov
15
cve-2002-0334
xtell
xtelld 1.91.1
symlink attack
.xtell-log
nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .xtell-log file.

Affected configurations

NVD
Node
xtellxtellMatch1.91.1
OR
xtellxtellMatch2.6.1

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2002-0334