Vulnerability Details CVE-2003-0136
psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.6%
CVSS Severity
CVSS v2 Score 2.1
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=188366
- http://www.debian.org/security/2003/dsa-285
- http://www.redhat.com/support/errata/RHSA-2003-142.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A423
- http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=188366
- http://www.debian.org/security/2003/dsa-285
- http://www.redhat.com/support/errata/RHSA-2003-142.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A423
Products affected by CVE-2003-0136
-
cpe:2.3:o:astart_technologies:lprng:3.7.4
-
cpe:2.3:o:astart_technologies:lprng:3.8.10.1
-
cpe:2.3:o:astart_technologies:lprng:3.8.19
-
cpe:2.3:o:astart_technologies:lprng:3.8.9