CVE
- Id
- 6865
- CVE No.
- CVE-2003-0036
- Status
- Candidate
- Description
- ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d".
- Phase
- Modified (20080326)
- Votes
- ACCEPT(2) Armstrong, Green | NOOP(3) Cole, Cox, Jones
- Comments
- Green> APPEARS IN MANDRAKE SECURITY ADVISORY MDKSA-2003:010 | THIS EXPLOIT DIFFERS FROM THE SYMLINK IN A SAMSUNG PRINTER REFERENCED IN CVE-2001-1177.