CVE-2001-1066: Low severity Sun Solaris vulnerability

Published Aug 31, 2001

Updated

ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack.

Affected Software

1 affected component

Sun Solaris

Event History

Aug 31, 2001

CVE Published

04:00 AM

Sep 1, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1066?

CVE-2001-1066 has a high severity level due to its potential for local users to exploit symlink vulnerabilities to overwrite arbitrary files.

How do I fix CVE-2001-1066?

To fix CVE-2001-1066, ensure file permissions are properly set to prevent unauthorized file overwrites and apply any available patches or updates.

Which systems are vulnerable to CVE-2001-1066?

CVE-2001-1066 affects versions of Solaris, specifically Netscape 6.01 and versions up to 6.2.1 beta.

What types of attacks does CVE-2001-1066 facilitate?

CVE-2001-1066 facilitates a symlink attack that allows local users to overwrite files, compromising system integrity.

Is CVE-2001-1066 still a relevant vulnerability today?

While CVE-2001-1066 is an older vulnerability, understanding its nature is important for recognizing similar symlink vulnerabilities in modern systems.