Cvsup

Cvsup

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.6

CVE-2004-2133

Exploit
  • EPSS 0.08%
  • Published 29.01.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries tha...

7.2

CVE-2002-2382

  • EPSS 0.09%
  • Published 31.12.2002 05:00:00
  • Last modified 03.04.2025 01:03:51

cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.