Unscored CVE-2001-0774 EUVD-2001-0759GHSA-7c5g-v27v-9rr3

Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on …

Published Mar 9, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files.

References

3003 vdb-entry
MDKSA-2001:064 vendor-advisory
20010709 Tripwire temporary files mailing-list
1895 vdb-entry
tripwire-tmpfile-symlink(6820) vdb-entry
VU#349019 third-party-advisory