Symlink Vulnerability in GNU Enscript Allows File Overwrite by Local Users
CVE-2002-0044

Currently unrated

Key Information:

Vendor
Gnu
Status
Enscript
Vendor
CVE Published:
31 January 2002

Summary

GNU Enscript versions 1.6.1 and earlier are susceptible to a file overwrite vulnerability, allowing local users to exploit temporary files through a symlink attack. This security issue arises from improper handling of temporary file creation, which can result in unauthorized access to overwrite or manipulate system files, potentially compromising the integrity and security of the affected system. Local users can create a symbolic link pointing to sensitive system files, leading to data loss and security breaches.

References

http://www.securityfocus.com/advisories/3818
vendor-advisoryx_refsource_HP
http://www.securityfocus.com/bid/3920
vdb-entryx_refsource_BID
http://www.redhat.com/support/errata/RHSA-2002-012.html
vendor-advisoryx_refsource_REDHAT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.