low1.2Public exploit code
CVE-2002-0296
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tarantella Enterprise 3 - Symbolic Link2002-02-19 · local · unix · Verified
Impact
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tarantella | Tarantella Enterprise | Versions 3.0, 3.01, 3.10, 3.11, 3.20 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-02/0187.html
- http://marc.info/?l=bugtraq&m=101467193803592&w=2
- http://www.securityfocus.com/bid/4115
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8223
- http://archives.neohapsis.com/archives/bugtraq/2002-02/0187.html
- http://marc.info/?l=bugtraq&m=101467193803592&w=2
- http://www.securityfocus.com/bid/4115
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8223