Back to search
CVE-2004-0233
Published: May 5, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
MDKSA-2004:031
vendor-advisory
x_refsource_MANDRAKE
1000752
vendor-advisory
x_refsource_SUNALERT
utemper-symlink(15904)
vdb-entry
x_refsource_XF
RHSA-2004:174
vendor-advisory
x_refsource_REDHAT
SSA:2004-110
vendor-advisory
x_refsource_SLACKWARE
GLSA-200405-05
vendor-advisory
x_refsource_GENTOO
oval:org.mitre.oval:def:10115
vdb-entry
signature
x_refsource_OVAL
10178
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:979
vdb-entry
signature
x_refsource_OVAL
RHSA-2004:175
vendor-advisory
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now