Unscored CVE-2002-0157 EUVD-2002-0156GHSA-q5x3-947g-ggqv

Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.

References

RHSA-2002:064 vendor-advisory
20020502 R7-0003: Nautilus Symlink Vulnerability mailing-list
4373 vdb-entry
nautilus-metafile-xml-symlink(8995) vdb-entry