CVE-2002-1395 Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagen...
LowCVSS 2.1
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian internet message | = 133-0 | No fix listed |
| debian internet message | = 141-0 | No fix listed |
| debian/im(Debian:12) | < 1:141-20 | 1:141-20 |
| debian/im(Debian:13) | < 1:141-20 | 1:141-20 |
| debian/im(Debian:14) | < 1:141-20 | 1:141-20 |
References
- 8166 third-party-advisory
- 8242 third-party-advisory
- DSA-202 patch vendor-advisory
- im-impwagent-insecure-directory(10766) vdb-entry
- im-immknmz-symlink(10767) vdb-entry
- RHSA-2003:039 vendor-advisory
- 6307 vdb-entry
- Debian Security Tracker CVE-2002-1395 vendor-advisory