low1.2Public exploit code
CVE-2001-1346
Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary file…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ARCservIT 6.61/6.63 Client - inetd.tmp Arbitrary File Overwrite2001-05-18 · local · linux · Verified
- ARCservIT 6.61/6.63 Client - asagent.tmp Arbitrary File Overwrite2001-05-18 · local · linux · Verified
Impact
Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Arcserve Backup | Version 6.61 |
| Ca | Arcserve Backup | Version 6.63 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0184.html
- http://www.securityfocus.com/bid/2741
- http://www.securityfocus.com/bid/2748
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0184.html
- http://www.securityfocus.com/bid/2741
- http://www.securityfocus.com/bid/2748