CVE-2002-1956: Low severity ROX Filer vulnerability
ROX Filer 1.1.9 and 1.2 is installed with world writable permissions, which allows local users to write to arbitrary files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove world-writable permissions from the ROX Filer installation and data files. For example, on the host run: sudo chmod -R o-w <rox_filer_install_dir> (replace <rox_filer_install_dir> with the actual installation/path). Verify there are no files with the others-write bit set (e.g., find <rox_filer_install_dir> -perm -o=w -ls and remediate as needed).
ROX Filer file permissions (world-writable) = remove world-writable bit (o-w)
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1956?
CVE-2002-1956 is considered a medium severity vulnerability due to its potential for local users to compromise file integrity.
How do I fix CVE-2002-1956?
To fix CVE-2002-1956, change the permissions of the affected ROX Filer directories to prevent world writable access.
Which versions of ROX Filer are affected by CVE-2002-1956?
CVE-2002-1956 affects ROX Filer versions 1.1.9 and 1.2.
What kind of security risk does CVE-2002-1956 pose?
CVE-2002-1956 allows local users to write to arbitrary files, potentially leading to unauthorized data modification or denial of service.
Is there a workaround for CVE-2002-1956?
A potential workaround for CVE-2002-1956 is to restrict local user access to the system or relocate the installation to a directory with limited permissions.