| Vulnerability Name: | CVE-2003-0136 (CCN-11774) | ||||||||||||||||
| Assigned: | 2003-04-14 | ||||||||||||||||
| Published: | 2003-04-14 | ||||||||||||||||
| Updated: | 2017-10-11 | ||||||||||||||||
| Summary: | psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file. | ||||||||||||||||
| CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)
| ||||||||||||||||
| CVSS v2 Severity: | 2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N)
| ||||||||||||||||
| Vulnerability Type: | CWE-Other | ||||||||||||||||
| Vulnerability Consequences: | File Manipulation | ||||||||||||||||
| References: | Source: CONFIRM Type: UNKNOWN http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=188366 Source: MITRE Type: CNA CVE-2003-0136 Source: CCN Type: RHSA-2003-142 Updated LPRng packages fix psbanner vulnerability Source: CCN Type: RHSA-2003-150 LPRng security update Source: CCN Type: RHSA-2003-225 Updated LPRng packages fix psbanner vulnerability Source: DEBIAN Type: Patch, Vendor Advisory DSA-285 Source: DEBIAN Type: DSA-285 lprng -- insecure temporary file Source: CCN Type: Immunix Secured OS Security Advisory IMNX-2003-7+-013-01 LPRng Source: CCN Type: Gentoo Linux Security Announcement 200306-04 lprng Source: REDHAT Type: Patch, Vendor Advisory RHSA-2003:142 Source: CCN Type: BID-7334 LPRng PSBanner Insecure Temporary File Creation Vulnerability Source: XF Type: UNKNOWN psbanner-tmpfile-symlink(11774) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:423 | ||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||||||
| Oval Definitions | |||||||||||||||||
| |||||||||||||||||
| BACK | |||||||||||||||||