CVE-2001-1448: Medium severity magic edeveloper vulnerability
Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc scripts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1448?
CVE-2001-1448 is considered a moderate severity vulnerability due to the potential for local users to exploit symlink attacks.
How do I fix CVE-2001-1448?
To mitigate CVE-2001-1448, ensure that the Magic eDeveloper software is upgraded to version 8.30.6 or later, which addresses the symlink vulnerability.
What systems are affected by CVE-2001-1448?
CVE-2001-1448 affects Magic eDeveloper Enterprise Edition versions 8.30-5 and earlier on local systems.
Can CVE-2001-1448 be exploited remotely?
No, CVE-2001-1448 can only be exploited by local users with access to the affected system.
What actions should I take if my system is vulnerable to CVE-2001-1448?
If your system is vulnerable to CVE-2001-1448, immediately upgrade your software and review your file permissions to prevent unauthorized access.