NVD

Id
79678  
Name
CVE-2002-0678  
Description
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2002-07-23  
Modified Date
2016-10-17  
Seq
2002-0678  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
397499 79678 CVE-2002-0678 CSSA-2002-SCO.28  View
397500 79678 CVE-2002-0678 20021101-01-P  View
397501 79678 CVE-2002-0678 IY32368  View
397502 79678 CVE-2002-0678 20020710 [CORE-20020528] Multiple vulnerabilities in ToolTalk Database server  View
397503 79678 CVE-2002-0678 oval:org.mitre.oval:def:175  View
397504 79678 CVE-2002-0678 oval:org.mitre.oval:def:2770  View
397505 79678 CVE-2002-0678 oval:org.mitre.oval:def:80  View
397506 79678 CVE-2002-0678 CA-2002-20  View
397507 79678 CVE-2002-0678 tooltalk-ttdbserverd-tttransaction-symlink(9527)  View
397508 79678 CVE-2002-0678 VU#299816  View
397509 79678 CVE-2002-0678 5083  View
397510 79678 CVE-2002-0678 HPSBUX0207-199  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63830 JVNDB-2002-000157 CDE ToolTalk の rpc.ttdbserverd における任意のファイルを上書きされる脆弱性 CDE ToolTalk には、TT_TRANSACTION プロシージャがログファイルを作成および書き込む場合に、ファイルのシンボリックリンクチェックが不適切であるため、ファイルを上書きされる脆弱性が存在します。 CVE-2002-0678 5068 CVE-2002-0678 79678 7.2 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000157.html 2002-07-10 2007-04-01 View