CVE-2002-0296 The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
LowCVSS 1.2
EPSS 0.66%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tarantella enterprise | = 3.0 | No fix listed |
| tarantella enterprise | = 3.01 | No fix listed |
| tarantella enterprise | = 3.10 | No fix listed |
| tarantella enterprise | = 3.11 | No fix listed |
| tarantella enterprise | = 3.20 | No fix listed |
References
- 20020219 Another local root vulnerability during installation of Tarantella Enterprise 3. exploit mailing-list vendor-advisory
- 20020224 Exploit for Tarantella Enterprise installation (bid 4115) mailing-list
- 4115 exploit vdb-entry vendor-advisory
- tarantella-tmp-spinning-symlink(8223) vdb-entry