Utempter ≫ Utempter

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

2.1

CVE-2004-0233

Exploit

EPSS 0.21%
Published 18.08.2004 04:00:00
Last modified 03.04.2025 01:03:51

Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.