CVE-2002-0662 scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper-tempfile.x temporary files.
LowCVSS 2.1
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper-tempfile.x temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dan mueth scrollkeeper | = 0.3 | No fix listed |
| dan mueth scrollkeeper | = 0.3.1 | No fix listed |
| dan mueth scrollkeeper | = 0.3.3 | No fix listed |
| dan mueth scrollkeeper | = 0.3.4 | No fix listed |
| dan mueth scrollkeeper | = 0.3.5 | No fix listed |
| dan mueth scrollkeeper | = 0.3.6 | No fix listed |
| dan mueth scrollkeeper | = 0.3.7 | No fix listed |
| dan mueth scrollkeeper | = 0.3.8 | No fix listed |
| dan mueth scrollkeeper | = 0.3.9 | No fix listed |
| dan mueth scrollkeeper | = 0.3.10 | No fix listed |
| dan mueth scrollkeeper | = 0.3.11 | No fix listed |
References
- 20020902 The ScrollKeeper Root Trap mailing-list
- 20020904 GLSA: scrollkeeper mailing-list
- DSA-160 patch vendor-advisory
- scrollkeeper-tmp-file-symlink(10002) vdb-entry
- RHSA-2002:186 patch vendor-advisory
- 5602 vdb-entry