CVE-2003-0847 - SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitra

CVE-2003-0847

Summary

SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file.

References

http://marc.info/?l=bugtraq&m=106545972615578&w=2
http://marc.info/?l=bugtraq&m=106546531922379&w=2

Vulnerable Configurations

cpe:2.3:o:suse:suse_linux:8.2:*:professional:*:*:*:*:*
cpe:2.3:o:suse:suse_linux:8.2:*:professional:*:*:*:*:*

CVSS

Base:	4.6 (as of 18-10-2016 - 02:37)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bugtraq

20031006 Local root exploit in SuSE Linux 8.2Pro
20031006 Re: Local root exploit in SuSE Linux 8.2Pro

Last major update

18-10-2016 - 02:37

Published

17-11-2003 - 05:00

Last modified

18-10-2016 - 02:37