CVE-2004-1110 The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file.
LowCVSS 2.1
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jean-jacques sarton mtink | = 0.9.32 | No fix listed |
| jean-jacques sarton mtink | = 0.9.33 | No fix listed |
| jean-jacques sarton mtink | = 0.9.52 | No fix listed |
| jean-jacques sarton mtink | = 0.9.53 | No fix listed |
| jean-jacques sarton mtink | = 1.0.4 | No fix listed |
| gentoo linux | All versions | No fix listed |
| debian/mtink(Debian:13) | < 1.0.5 | 1.0.5 |
| debian/mtink(Debian:14) | < 1.0.5 | 1.0.5 |
References
- bugs.gentoo.org
- GLSA-200411-17 patch vendor-advisory
- 11640 patch vdb-entry vendor-advisory
- mtink-tmp-file-symlink(18011) vdb-entry
- Debian Security Tracker CVE-2004-1110 vendor-advisory