First published: Mon Mar 12 2001(Updated: )
vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Immunix | =7.0_beta | |
Red Hat Linux | =7.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-0143 is considered a medium severity vulnerability due to the potential for local users to exploit it.
To fix CVE-2001-0143, ensure that you upgrade to a patched version of vpop3d or apply the appropriate security patches.
CVE-2001-0143 affects local users on systems running vulnerable versions of vpop3d in Linuxconf 1.23r and earlier.
CVE-2001-0143 is associated with a symlink attack that allows file overwrites.
No, CVE-2001-0143 is only exploitable by local users with access to the system.