medium6.2Public exploit code
CVE-2001-0906
teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- teTeX 1.0.7 - Filters Temporary File Race Condition2001-06-22 · local · linux · Verified
Impact
teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tetex | Tetex | through 1.0.7.7 |
References
- NVD record
- CVE.org record
- http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-030-01
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-086.php3
- http://www.redhat.com/support/errata/RHSA-2001-102.html
- http://www.securityfocus.com/archive/1/192647
- http://www.securityfocus.com/bid/2974
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6785
- http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-030-01
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-086.php3
- http://www.redhat.com/support/errata/RHSA-2001-102.html
- http://www.securityfocus.com/archive/1/192647
- http://www.securityfocus.com/bid/2974
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6785