Unscored CVE-2002-2001 EUVD-2002-1981GHSA-x5v5-9fj9-665w

jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a s…

Published Jul 14, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.

References

3940 vdb-entry
linux-jmcce-tmp-symlink(7980) vdb-entry
MDKSA-2002:008 vendor-advisory