Published: 12/08/2002 Updated: 04/09/2013

CVSS v2 Base Score: 6.2 | Impact Score: 10 | Exploitability Score: 1.9

VMScore: 625

Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C

OSSP mm library (libmm) prior to 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ossp mm 1.0.0
ossp mm 1.0.1
ossp mm 1.0.5
ossp mm 1.0.6
ossp mm 1.0.12
ossp mm 1.0.2
ossp mm 1.0.9
ossp mm 1.1.0
ossp mm 1.0.3
ossp mm 1.0.4
ossp mm 1.1.1
ossp mm 1.1.2
ossp mm 1.1.3
ossp mm 1.0.10
ossp mm 1.0.11
ossp mm 1.0.7
ossp mm 1.0.8

Marcus Meissner and Sebastian Krahmer discovered and fixed a temporary file vulnerability in the mm shared memory library This problem can be exploited to gain root access to a machine running Apache which is linked against this library, if shell access to the user “www-data” is already available (which could easily be triggered through PHP) ...

source: wwwsecurityfocuscom/bid/5352/info The MM Shared Memory library is reported to be prone to a race condition with regards to temporary files which may enable a local attacker to gain elevated privileges This issue may reportedly be exploited by an attacker with shell access as the Apache webserver user to gain root privileges on a ...

NVD-CWE-Other http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-045.php http://rhn.redhat.com/errata/RHSA-2002-153.html http://rhn.redhat.com/errata/RHSA-2002-154.html http://rhn.redhat.com/errata/RHSA-2002-156.html http://www.redhat.com/support/errata/RHSA-2002-163.html http://rhn.redhat.com/errata/RHSA-2002-164.html http://www.redhat.com/support/errata/RHSA-2003-158.html ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-032.0.txt http://www.debian.org/security/2002/dsa-137 http://online.securityfocus.com/advisories/4392 http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html http://www.iss.net/security_center/static/9719.php http://www.securityfocus.com/bid/5352 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc https://nvd.nist.gov https://www.debian.org/security/./dsa-137 https://www.exploit-db.com/exploits/21667/

CVE-2002-0658

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect