2.1
CVSSv2

CVE-2002-0662

Published: 04/10/2002 Updated: 18/10/2016
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper-tempfile.x temporary files.

Vulnerable Product Search on Vulmon Subscribe to Product

dan mueth scrollkeeper 0.3.5

dan mueth scrollkeeper 0.3.6

dan mueth scrollkeeper 0.3.10

dan mueth scrollkeeper 0.3.11

dan mueth scrollkeeper 0.3.9

dan mueth scrollkeeper 0.3.3

dan mueth scrollkeeper 0.3.4

dan mueth scrollkeeper 0.3

dan mueth scrollkeeper 0.3.1

dan mueth scrollkeeper 0.3.7

dan mueth scrollkeeper 0.3.8

Vendor Advisories

Spybreak discovered a problem in scrollkeeper, a free electronic cataloging system for documentation The scrollkeeper-get-cl program creates temporary files in an insecure manner in /tmp using guessable filenames Since scrollkeeper is called automatically when a user logs into a Gnome session, an attacker with local access can easily create and o ...