low2.1Public exploit code
CVE-2001-0736
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink at…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- University of Washington Pico 3.x/4.x - File Overwrite2000-12-11 · local · linux · Verified
Impact
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Immunix | Immunix | Versions 6.2, 7.0, 7.0_beta |
| University Of Washington | Pine | through 4.33 |
| Engardelinux | Secure Linux | Version 1.0.1 |
| Mandrakesoft | Mandrake Linux | Versions 7.1, 7.2, 8.0 |
| Mandrakesoft | Mandrake Linux Corporate Server | Version 1.0.1 |
| Redhat | Linux | Versions 5.2, 6.2, 7.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=98749102621604&w=2
- http://marc.info/?l=bugtraq&m=99106787825229&w=2
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-047.php3?dis=8.0
- http://www.redhat.com/support/errata/RHSA-2001-042.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6367
- http://marc.info/?l=bugtraq&m=98749102621604&w=2
- http://marc.info/?l=bugtraq&m=99106787825229&w=2
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-047.php3?dis=8.0
- http://www.redhat.com/support/errata/RHSA-2001-042.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6367