CVE

Id
8661  
CVE No.
CVE-2004-0233  
Status
Candidate  
Description
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.  
Phase
Assigned (20040317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
54469 8661 CVE-2004-0233 MANDRAKE:MDKSA-2004:031  View
54470 8661 CVE-2004-0233 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:031  View
54471 8661 CVE-2004-0233 REDHAT:RHSA-2004:174  View
54472 8661 CVE-2004-0233 URL:http://www.redhat.com/support/errata/RHSA-2004-174.html  View
54473 8661 CVE-2004-0233 REDHAT:RHSA-2004:175  View
54474 8661 CVE-2004-0233 URL:http://www.redhat.com/support/errata/RHSA-2004-175.html  View
54475 8661 CVE-2004-0233 SLACKWARE:SSA:2004-110  View
54476 8661 CVE-2004-0233 URL:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404389  View
54477 8661 CVE-2004-0233 GENTOO:GLSA-200405-05  View
54478 8661 CVE-2004-0233 URL:http://security.gentoo.org/glsa/glsa-200405-05.xml  View
54479 8661 CVE-2004-0233 SUNALERT:1000752  View
54480 8661 CVE-2004-0233 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000752.1-1  View
54481 8661 CVE-2004-0233 BID:10178  View
54482 8661 CVE-2004-0233 URL:http://www.securityfocus.com/bid/10178  View
54483 8661 CVE-2004-0233 OVAL:oval:org.mitre.oval:def:10115  View
54484 8661 CVE-2004-0233 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10115  View
54485 8661 CVE-2004-0233 XF:utemper-symlink(15904)  View
54486 8661 CVE-2004-0233 URL:http://xforce.iss.net/xforce/xfdb/15904  View
54487 8661 CVE-2004-0233 OVAL:oval:org.mitre.oval:def:979  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62827 JVNDB-2004-000169 LHa の Test/eXtract ルーチンにおけるバッファオーバーフローの脆弱性 LHa for UNIX には、書庫をテストまたは解凍する際に、ヘッダ情報の長さを適切に取り扱わない複数の不備が存在するため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0234 8661 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000169.html  View