CVE-2003-0120 adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name.
LowCVSS 1.2
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mhc-utils | = 0.25_snap2001-06-25 | No fix listed |
| debian/mhc(Debian:12) | < 0.25+20030224-1 | 0.25+20030224-1 |
| debian/mhc(Debian:13) | < 0.25+20030224-1 | 0.25+20030224-1 |
| debian/mhc(Debian:14) | < 0.25+20030224-1 | 0.25+20030224-1 |
References
- DSA-256 patch vendor-advisory
- mhc-adb2mhc-insecure-tmp(11439) vdb-entry
- 6978 vdb-entry
- Debian Security Tracker CVE-2003-0120 vendor-advisory