Unscored CVE-2001-0529 EUVD-2001-0522GHSA-4224-q4g2-3wx3

OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.

Published Mar 9, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.

References

IMNX-2001-70-034-01 vendor-advisory
openssh-symlink-file-deletion(6676) vdb-entry
20010612 vendor-advisory
20010604 SSH allows deletion of other users files... mailing-list
20010604 Re: SSH allows deletion of other users files... mailing-list
20010605 OpenSSH_2.5.2p2 RH7.0 <- version info mailing-list
CSSA-2001-023.0 vendor-advisory
VU#655259 third-party-advisory
2825 vdb-entry
1853 vdb-entry
CLA-2001:431 vendor-advisory