Unscored CVE-2001-0125 EUVD-2001-0125GHSA-xqfx-vw59-w985

exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.

References

MDKSA-2001:015 vendor-advisory
FreeBSD-SA-01:17 vendor-advisory
20001231 Advisory: exmh symlink vulnerability mailing-list
20010112 exmh security vulnerability mailing-list
DSA-022 vendor-advisory
exmh-error-symlink(5829) vdb-entry
http://www.beedub.com/exmh/symlink.html