Vulnerability Details CVE-2001-1146
AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.1%
CVSS Severity
CVSS v2 Score 1.2
References
- http://www.linuxsecurity.com/advisories/other_advisory-1492.html
- http://www.securityfocus.com/bid/3016
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6830
- http://www.linuxsecurity.com/advisories/other_advisory-1492.html
- http://www.securityfocus.com/bid/3016
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6830
Products affected by CVE-2001-1146
-
cpe:2.3:a:lee_herron:allcommerce:1.2.3