Published: 08/09/2004 Updated: 11/07/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

The (1) write_list and (2) dump_curr_list functions in Net-Acct prior to 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ulrich callmeier net-acct 0.71
ulrich callmeier net-acct 0.6
ulrich callmeier net-acct 0.7

Stefan Nordhausen has identified a local security hole in net-acct, a user-mode IP accounting daemon Old and redundant code from some time way back in the past created a temporary file in an insecure fashion For the stable distribution (woody) this problem has been fixed in version 071-5woody1 For the unstable distribution (sid) this problem ha ...

NVD-CWE-Other http://exorsus.net/projects/net-acct/net-acct-notempfiles.patch http://www.debian.org/security/2004/dsa-559 http://www.securityfocus.com/bid/11125 http://secunia.com/advisories/12476 http://marc.info/?l=bugtraq&m=109466910232385&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/17283 https://nvd.nist.gov https://www.debian.org/security/./dsa-559

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-0851

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect