Lucene search
HistoryDec 31, 2002 - 5:00 a.m.
CVE-2002-2001
CVSS2
1.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
AI Score
6.3
Confidence
High
EPSS
0
Percentile
5.1%
jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.
Affected configurations
Node
jmccejmcceMatch1.3.8
Node
mandrakesoftmandrake_linuxMatch8.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jmcce | jmcce | 1.3.8 | cpe:2.3:a:jmcce:jmcce:1.3.8:*:*:*:*:*:*:* |
| mandrakesoft | mandrake_linux | 8.1 | cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2002-2001
2005-07-14 04:00:00
nessus
nessus
Mandrake Linux Security Advisory : jmcce (MDKSA-2002:008)
2004-07-31 00:00:00
cve
cve
CVE-2002-2001
2005-07-14 04:00:00
CVSS2
1.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
AI Score
6.3
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2002-2001