CVE

Id
3343  
CVE No.
CVE-2001-0529  
Status
Entry  
Description
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named "cookies" via a symlink attack.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
14247 3343 CVE-2001-0529 BUGTRAQ:20010604 SSH allows deletion of other users files...  View
14248 3343 CVE-2001-0529 URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0322.html  View
14249 3343 CVE-2001-0529 BUGTRAQ:20010604 Re: SSH allows deletion of other users files...  View
14250 3343 CVE-2001-0529 URL:http://archives.neohapsis.com/archives/bugtraq/2001-06/0007.html  View
14251 3343 CVE-2001-0529 BUGTRAQ:20010605 OpenSSH_2.5.2p2 RH7.0 <- version info  View
14252 3343 CVE-2001-0529 URL:http://online.securityfocus.com/archive/1/188737  View
14253 3343 CVE-2001-0529 NETBSD:NetBSD-SA2001-010  View
14254 3343 CVE-2001-0529 URL:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-010.txt.asc  View
14255 3343 CVE-2001-0529 CALDERA:CSSA-2001-023.0  View
14256 3343 CVE-2001-0529 URL:http://www.calderasystems.com/support/security/advisories/CSSA-2001-023.0.txt  View
14257 3343 CVE-2001-0529 CERT-VN:VU#655259  View
14258 3343 CVE-2001-0529 URL:http://www.kb.cert.org/vuls/id/655259  View
14259 3343 CVE-2001-0529 OPENBSD:20010612  View
14260 3343 CVE-2001-0529 URL:http://www.openbsd.org/errata29.html  View
14261 3343 CVE-2001-0529 IMMUNIX:IMNX-2001-70-034-01  View
14262 3343 CVE-2001-0529 URL:http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01  View
14263 3343 CVE-2001-0529 CONECTIVA:CLA-2001:431  View
14264 3343 CVE-2001-0529 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431  View
14265 3343 CVE-2001-0529 BID:2825  View
14266 3343 CVE-2001-0529 URL:http://www.securityfocus.com/bid/2825  View
14267 3343 CVE-2001-0529 XF:openssh-symlink-file-deletion(6676)  View
14268 3343 CVE-2001-0529 URL:http://xforce.iss.net/static/6676.php  View
14269 3343 CVE-2001-0529 OSVDB:1853  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64109 JVNDB-2001-000083 OpenSSH の X11 フォワーディングにおけるシンボリックリンク攻撃を受ける脆弱性 OpenSSH の X11 フォワーディングの実装において、 /tmp に cookies と言う名称のシンボリックリンクが存在している場合に、セッション終了と同時にシンボリックリンクが指し示しているファイルが削除されてしまう脆弱性が存在します。 CVE-2001-0529 3343 7.2 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000083.html  View