medium4.6
CVE-2001-1448
Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on tempor…
Impact
Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Magic | Edeveloper | through 8.30.5 |
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/157795
- http://www.securityfocus.com/archive/1/246343
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10616
- http://www.kb.cert.org/vuls/id/157795
- http://www.securityfocus.com/archive/1/246343
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10616