CVE-2002-2001: Low severity jmcce jmcce vulnerability
Published Dec 31, 2002
·Updated
jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.
Affected Software
2 affected components
jmcce jmcce=1.3.8
Mandrakesoft Mandrake Linux=8.1
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Jul 14, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2001?
CVE-2002-2001 is considered a medium severity vulnerability due to the potential for local file overwriting through a symlink attack.
2
How do I fix CVE-2002-2001?
To fix CVE-2002-2001, you should update jmcce to a version that does not create predictable log file names.
3
Who is affected by CVE-2002-2001?
Users of jmcce version 1.3.8 on Mandrake Linux 8.1 are primarily affected by CVE-2002-2001.
4
What type of attack does CVE-2002-2001 enable?
CVE-2002-2001 enables local users to conduct a symlink attack to overwrite arbitrary files.
5
When was CVE-2002-2001 disclosed?
CVE-2002-2001 was disclosed in the year 2002.