Oval Definition:
oval:org.mitre.oval:def:423
Revision Date
:
2010-09-20
Version
:
19
Title
:
LPRng Symbolic Link Attack Vulnerability
Description
:
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file.
Family
:
unix
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2003-0136
Platform(s)
:
Red Hat Linux 9
Product(s)
:
LPRng
Definition Synopsis
Software section
Red Hat 9 is installed
AND
ix86 architecture
AND
lprng version is less than 3.8.19-3.1
AND
Configuration section
psbanner is world-executable
AND
lpd listening on the network
BACK