1.2
CVSSv2

CVE-2001-0095

Published: 12/02/2001 Updated: 30/10/2018
CVSS v2 Base Score: 1.2 | Impact Score: 2.9 | Exploitability Score: 1.9
VMScore: 140
Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N

Vulnerability Summary

catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.

Vulnerable Product Search on Vulmon Subscribe to Product

sun sunos 5.8

sun sunos 5.7

Exploits

source: wwwsecurityfocuscom/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment A problem exists which could allow local users to overwrite or corrupt files owned by other users The problem occurs in the creation of temporary files by the catman program Upon ...
source: wwwsecurityfocuscom/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment A problem exists which could allow local users to overwrite or corrupt files owned by other users The problem occurs in the creation of temporary files by the catman program Upon e ...
#!/usr/local/bin/perl -w # # The problem is catman creates files in /tmp insecurly # They are based on the PID of the catman process, # catman will happily clobber any files that are # symlinked to that file The idea of this script is to # create a block of symlinks to the target file with # the current PID as a starting point Depending on # ...
#!/usr/local/bin/perl -w # # The problem is catman creates files in /tmp # insecurly They are based on the PID of the # catman process, catman will happily clobber # any files that are symlinked to that file # The idea of this script is to watch the # process list for the catman process, get # the pid and Create a symlink in /tmp to our ...