First published: Wed Mar 27 2002(Updated: )
LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Logwatch | <=2.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0162 is considered to have a moderate severity due to its potential for local users to execute arbitrary code.
To fix CVE-2002-0162, upgrade LogWatch to version 2.5 or higher.
CVE-2002-0162 affects all local users running LogWatch versions prior to 2.5.
CVE-2002-0162 describes a symlink attack that allows local users to exploit the logwatch temporary directory.
CVE-2002-0162 cannot be exploited remotely as it requires local access to the system.