Vulnerability in Mandrakesoft Mandrake Linux
CVE-2004-0559
The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.
EPSS: 0.004 (28.8th percentile) — read the EPSS interpretation.
Affected products
- Mandrakesoft Mandrake_linux — versions 9.2, 10.0
- Mandrakesoft Mandrake_linux_corporate_server — versions 2.1
- Usermin — versions 1.000, 1.010, 1.020
- Webmin — versions 1.0.00, 1.0.20, 1.0.50
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)