Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-2210
openoffice
installation
symlink attack
privilege escalation
cve-2002-2210
nvd
6.2 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file.
Affected configurations
Node
openofficeopenofficeMatch1.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| openoffice:openoffice | openoffice | eq | 1.0.1 |
Related
nvd
nvd
CVE-2002-2210
2002-12-31 05:00:00
redhatcve
redhatcve
CVE-2002-2210
2015-10-30 10:02:38
cvelist
cvelist
CVE-2002-2210
2022-10-03 16:23:50
6.2 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2002-2210