low1.2Public exploit code
CVE-2001-0095
catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Solaris 2.x/7.0/8 - 'Catman' Race Condition (2)2000-11-21 · local · solaris · Verified
- Solaris 2.x/7.0/8 - 'Catman' Race Condition (1)2000-11-21 · local · solaris · Verified
- SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber2000-12-20 · dos · solaris · Verified
- Solaris 2.7/2.8 Catman - Local Insecure tmp Symlink2000-12-19 · dos · windows · Verified
Impact
catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Sunos | Versions 5.7, 5.8 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0313.html
- http://www.osvdb.org/6024
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5788
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0313.html
- http://www.osvdb.org/6024
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5788