NVD

Id
70684  
Name
CVE-2004-0233  
Description
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2004-08-18  
Modified Date
2017-07-10  
Seq
2004-0233  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364693 70684 CVE-2004-0233 oval:org.mitre.oval:def:10115  View
364694 70684 CVE-2004-0233 oval:org.mitre.oval:def:979  View
364695 70684 CVE-2004-0233 GLSA-200405-05  View
364696 70684 CVE-2004-0233 1000752  View
364697 70684 CVE-2004-0233 MDKSA-2004:031  View
364698 70684 CVE-2004-0233 RHSA-2004:174  View
364699 70684 CVE-2004-0233 RHSA-2004:175  View
364700 70684 CVE-2004-0233 10178  View
364701 70684 CVE-2004-0233 SSA:2004-110  View
364702 70684 CVE-2004-0233 utemper-symlink(15904)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62807 JVNDB-2004-000148 Utempter におけるシンボリックリンク攻撃を受ける脆弱性 Utempter には、デバイスへのパスに "/../"、"/./"、"//" のいずれかの文字列が含まれる場合、これらの文字列以降に指定されているパスの妥当性が適切に確認されない脆弱性が存在します。 CVE-2004-0233 8660 CVE-2004-0233 70684 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000148.html 2004-04-19 2007-04-01 View