ID CVE-2003-0036
Summary ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d".
References
Vulnerable Configurations
  • cpe:2.3:a:rildo_pragana:ml85p:*:*:*:*:*:*:*:*
    cpe:2.3:a:rildo_pragana:ml85p:*:*:*:*:*:*:*:*
CVSS
Base: 6.2 (as of 19-10-2018 - 15:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL HIGH NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:H/Au:N/C:C/I:C/A:C
refmap via4
bugtraq 20030121 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package
mandrake MDKSA-2003:010
misc http://www.idefense.com/advisory/01.21.03.txt
sectrack 1005959
vulnwatch 20030121 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package
Last major update 19-10-2018 - 15:29
Published 07-02-2003 - 05:00
Last modified 19-10-2018 - 15:29
Back to Top