CVE-2002-2274 - akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlin

CVE-2002-2274

Summary

akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .plan file.

References

Vulnerable Configurations

cpe:2.3:a:akfingerd:akfingerd:0.5:*:*:*:*:*:*:*
cpe:2.3:a:akfingerd:akfingerd:0.5:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:P/A:N

refmap via4

bid	6325
bugtraq	20021205 Multiple vulnerabilities in akfingerd
confirm	http://synflood.at/akfingerd
xf	akfingerd-read-files(10796)

Last major update

29-07-2017 - 01:29

Published

31-12-2002 - 05:00

Last modified

29-07-2017 - 01:29