Unscored CVE-2001-0138 EUVD-2001-0138GHSA-8v2v-3g3x-fvg3

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.

References

20010110 Immunix OS Security update for lots of temp file problems mailing-list
2189 vdb-entry
MDKSA-2001-001 vendor-advisory
linux-wuftpd-privatepw-symlink(5915) vdb-entry
DSA-016 vendor-advisory