CVE-2002-0887 - scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files

CVE-2002-0887

Summary

scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.

References

ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt
http://marc.info/?l=bugtraq&m=99057164129869&w=2
http://www.iss.net/security_center/static/9210.php
http://www.securityfocus.com/bid/4875

Vulnerable Configurations

cpe:2.3:a:caldera:openserver:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:caldera:openserver:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:caldera:openserver:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:caldera:openserver:5.0.6:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 18-10-2016 - 02:22)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:P/A:N

refmap via4

bid	4875
bugtraq	20010522 [SRT2001-10] - scoadmin /tmp issues
caldera	CSSA-2002-SCO.22
xf	openserver-scoadmin-symlink(9210)

Last major update

18-10-2016 - 02:22

Published

04-10-2002 - 04:00

Last modified

18-10-2016 - 02:22