5.5

CVE-2002-0793

Exploit
Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.34% 0.677
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html
Vendor Advisory
Exploit
Broken Link
http://www.iss.net/security_center/static/9231.php
Patch
Vendor Advisory
Broken Link
http://www.securityfocus.com/bid/4901
Third Party Advisory
Broken Link
VDB Entry
http://www.securityfocus.com/bid/4902
Patch
Third Party Advisory
Vendor Advisory
Exploit
Broken Link
VDB Entry
http://www.securityfocus.com/bid/4903
Third Party Advisory
Broken Link
VDB Entry
http://www.securityfocus.com/bid/4904
Third Party Advisory
Broken Link
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/9232
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/9233
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/9234
Third Party Advisory
VDB Entry