CVE-2001-0125: Low severity exmh exmh vulnerability
Published Mar 12, 2001
·Updated
exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.
Affected Software
8 affected components
exmh exmh<=2.2
Mandrakesoft Mandrake Linux=7.2
Debian Debian Linux=2.2
Mandrakesoft Mandrake Linux=7.0
Mandrakesoft Mandrake Linux Corporate Server=1.0.1
Mandrakesoft Mandrake Linux=7.1
Mandrakesoft Mandrake Linux=6.0
Mandrakesoft Mandrake Linux=6.1
Remediation
Patch Available
Event History
Mar 12, 2001
CVE Published
05:00 AM
May 7, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0125?
CVE-2001-0125 has a moderate severity rating due to the potential for local users to overwrite arbitrary files through a symlink attack.
2
How do I fix CVE-2001-0125?
To fix CVE-2001-0125, update exmh to version 2.3 or later where the vulnerability has been addressed.
3
What systems are affected by CVE-2001-0125?
CVE-2001-0125 affects exmh 2.2 and earlier, as well as various versions of Mandrake and Debian Linux.
4
What type of attack is associated with CVE-2001-0125?
CVE-2001-0125 is associated with a symlink attack that can allow local users to overwrite files.
5
Can CVE-2001-0125 be exploited remotely?
No, CVE-2001-0125 requires local access to the system to exploit the vulnerability.