What is the severity of CVE-2001-0890?

CVE-2001-0890 has been classified as a medium-severity vulnerability due to its potential for local file modification.

How does CVE-2001-0890 affect users?

CVE-2001-0890 allows local users to exploit symlink attacks on temporary files, leading to unauthorized file modifications.

Which versions of SANE are impacted by CVE-2001-0890?

CVE-2001-0890 affects SANE library versions 1.0.0 through 1.0.3.

How can I remediate CVE-2001-0890?

To fix CVE-2001-0890, upgrade to SANE library version 1.0.4 or later.

Is CVE-2001-0890 a remote exploit?

No, CVE-2001-0890 is not a remote exploit; it requires local user access to the system.

Vulnerability/
CVE-2001-0890

low

2.1

CWE

NVD-CWE-Other

11/12/2001

23/7/2002

8/8/2024

CVE-2001-0890

First published: Tue Dec 11 2001(Updated: )

Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
SANE Project SANE Backends	=1.0.0
SANE Project SANE Backends	=1.0.1
SANE Project SANE Backends	=1.0.2
SANE Project SANE Backends	=1.0.3
SANE Project SANE Backends	=1.0.4
SANE Project SANE Backends	=1.0.5
SANE Project SANE Backends	=1.0.6

Remedy

http://rhn.redhat.com/errata/RHSA-2001-171.html

Remedy

http://www.iss.net/security_center/static/7714.php

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2001-0890?
CVE-2001-0890 has been classified as a medium-severity vulnerability due to its potential for local file modification.
How does CVE-2001-0890 affect users?
CVE-2001-0890 allows local users to exploit symlink attacks on temporary files, leading to unauthorized file modifications.
Which versions of SANE are impacted by CVE-2001-0890?
CVE-2001-0890 affects SANE library versions 1.0.0 through 1.0.3.
How can I remediate CVE-2001-0890?
To fix CVE-2001-0890, upgrade to SANE library version 1.0.4 or later.
Is CVE-2001-0890 a remote exploit?
No, CVE-2001-0890 is not a remote exploit; it requires local user access to the system.

agent/type
agent/first-publish-date
agent/remedy
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/weakness
agent/author
agent/severity
agent/references
agent/event
agent/description
agent/source
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-historical
vendor/sane
canonical/sane sane
version/sane sane/1.0.0
version/sane sane/1.0.1
version/sane sane/1.0.2
version/sane sane/1.0.3
version/sane sane/1.0.4
version/sane sane/1.0.5
version/sane sane/1.0.6

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2001-0890?
CVE-2001-0890 has been classified as a medium-severity vulnerability due to its potential for local file modification.
How does CVE-2001-0890 affect users?
CVE-2001-0890 allows local users to exploit symlink attacks on temporary files, leading to unauthorized file modifications.
Which versions of SANE are impacted by CVE-2001-0890?
CVE-2001-0890 affects SANE library versions 1.0.0 through 1.0.3.
How can I remediate CVE-2001-0890?
To fix CVE-2001-0890, upgrade to SANE library version 1.0.4 or later.
Is CVE-2001-0890 a remote exploit?
No, CVE-2001-0890 is not a remote exploit; it requires local user access to the system.