Lucene search

MitreCVE-2002-0658

HistoryApr 02, 2003 - 5:00 a.m.

CVE-2002-0658

2003-04-0205:00:00

mitre

web.nvd.nist.gov

cve-2002-0658

ossp

mm library

libmm

apache

privilege escalation

temporary files

symbolic link attack

CVSS2

6.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

29.4%

JSON

OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack.

Affected configurations

Nvd

Node

osspmmMatch1.0.0

osspmmMatch1.0.1

osspmmMatch1.0.2

osspmmMatch1.0.3

osspmmMatch1.0.4

osspmmMatch1.0.5

osspmmMatch1.0.6

osspmmMatch1.0.7

osspmmMatch1.0.8

osspmmMatch1.0.9

osspmmMatch1.0.10

osspmmMatch1.0.11

osspmmMatch1.0.12

osspmmMatch1.1.0

osspmmMatch1.1.1

osspmmMatch1.1.2

osspmmMatch1.1.3

VendorProductVersionCPE
osspmm1.0.0cpe:2.3:a:ossp:mm:1.0.0:*:*:*:*:*:*:*
osspmm1.0.1cpe:2.3:a:ossp:mm:1.0.1:*:*:*:*:*:*:*
osspmm1.0.2cpe:2.3:a:ossp:mm:1.0.2:*:*:*:*:*:*:*
osspmm1.0.3cpe:2.3:a:ossp:mm:1.0.3:*:*:*:*:*:*:*
osspmm1.0.4cpe:2.3:a:ossp:mm:1.0.4:*:*:*:*:*:*:*
osspmm1.0.5cpe:2.3:a:ossp:mm:1.0.5:*:*:*:*:*:*:*
osspmm1.0.6cpe:2.3:a:ossp:mm:1.0.6:*:*:*:*:*:*:*
osspmm1.0.7cpe:2.3:a:ossp:mm:1.0.7:*:*:*:*:*:*:*
osspmm1.0.8cpe:2.3:a:ossp:mm:1.0.8:*:*:*:*:*:*:*
osspmm1.0.9cpe:2.3:a:ossp:mm:1.0.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ossp	mm	1.0.0	cpe:2.3:a:ossp:mm:1.0.0:::::::*
ossp	mm	1.0.1	cpe:2.3:a:ossp:mm:1.0.1:::::::*
ossp	mm	1.0.2	cpe:2.3:a:ossp:mm:1.0.2:::::::*
ossp	mm	1.0.3	cpe:2.3:a:ossp:mm:1.0.3:::::::*
ossp	mm	1.0.4	cpe:2.3:a:ossp:mm:1.0.4:::::::*
ossp	mm	1.0.5	cpe:2.3:a:ossp:mm:1.0.5:::::::*
ossp	mm	1.0.6	cpe:2.3:a:ossp:mm:1.0.6:::::::*
ossp	mm	1.0.7	cpe:2.3:a:ossp:mm:1.0.7:::::::*
ossp	mm	1.0.8	cpe:2.3:a:ossp:mm:1.0.8:::::::*
ossp	mm	1.0.9	cpe:2.3:a:ossp:mm:1.0.9:::::::*