low1.2Public exploit code
CVE-2001-0109
rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (2)2001-01-13 · local · linux · Verified
- SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (1)2001-01-13 · local · linux · Verified
Impact
rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Suse | Suse Linux | Versions 6.1, 6.2, 6.3, 6.4, 7.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-01/0226.html
- http://archives.neohapsis.com/archives/bugtraq/2001-01/0272.html
- http://www.securityfocus.com/bid/2207
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5945
- http://archives.neohapsis.com/archives/bugtraq/2001-01/0226.html
- http://archives.neohapsis.com/archives/bugtraq/2001-01/0272.html
- http://www.securityfocus.com/bid/2207
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5945