Vulnerability in Jmcce
CVE-2002-2001
jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.
EPSS: 0.003 (21.8th percentile) — read the EPSS interpretation.
Affected products
- Jmcce — versions 1.3.8
- Mandrakesoft Mandrake_linux — versions 8.1
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, vdb-entry, x_refsource_XF)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)