Unscored CVE-2001-0142 EUVD-2001-0142GHSA-j4fw-2x7f-vr9f

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.

References

20010110 Immunix OS Security update for lots of temp file problems mailing-list
2184 vdb-entry
DSA-019 vendor-advisory
squid-email-symlink(5921) vdb-entry
MDKSA-2001:003 vendor-advisory
20010112 Trustix Security Advisory - diffutils squid mailing-list