CVE

Id
4555  
CVE No.
CVE-2002-0162  
Status
Candidate  
Description
LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory.  
Phase
Modified (20020817-01)  
Votes
ACCEPT(4) Armstrong, Cole, Cox, Green | MODIFY(1) Frech | NOOP(3) Christey, Foat, Wall  
Comments
Christey> Modify the desc: it"s temporary *directory* creation. | | XF:logwatch-tmp-race-condition(8652) | URL:http://www.iss.net/security_center/static/8652.php | BID:4374 | URL:http://online.securityfocus.com/bid/4374 | Frech> XF:logwatch-tmp-race-condition(8652)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
22616 4555 CVE-2002-0162 BUGTRAQ:20020327 Root compromise through LogWatch 2.1.1  View
22617 4555 CVE-2002-0162 URL:http://marc.info/?l=bugtraq&m=101724766216872  View
22618 4555 CVE-2002-0162 VULN-DEV:20020327 Root compromise through LogWatch 2.1.1  View
22619 4555 CVE-2002-0162 URL:http://online.securityfocus.com/archive/82/264233  View
22620 4555 CVE-2002-0162 CONFIRM:http://list.kaybee.org/archives/logwatch-announce/2002-March/000002.html  View
22621 4555 CVE-2002-0162 REDHAT:RHSA-2002:053  View
22622 4555 CVE-2002-0162 REDHAT:RHSA-2002:054  View
22623 4555 CVE-2002-0162 XF:logwatch-tmp-race-condition(8652)  View
22624 4555 CVE-2002-0162 URL:http://www.iss.net/security_center/static/8652.php  View
22625 4555 CVE-2002-0162 BID:4374  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63743 JVNDB-2002-000070 LogWatch における任意のコードを実行される脆弱性 ------------ CVE-2002-0162 4555 6.2 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000070.html  View