Beveiligingsadvies

CVE-2004-0233

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2004-05-05 04:00:00
Laatst bijgewerkt 2024-08-08 00:10:03
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.