ISOMAN

CVE

CVE-2004-0233

Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.

Severity
LOW
CVSS
2.1
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
Slackware12.0 x86 install-d1unknownsource
Slackware12.0 x86 install-d2unknownsource
Slackware12.0 x86 install-d3unknownsource
Slackware12.0 x86 install-dvdunknownsource
Slackware12.0 x86 source-d4unknownsource
Slackware12.0 x86 source-d5unknownsource
Slackware12.0 x86 source-d6unknownsource
Slackware12.1 x86 install-d1unknownsource
Slackware12.1 x86 install-d2unknownsource
Slackware12.1 x86 install-d3unknownsource
Slackware12.1 x86 install-dvdunknownsource
Slackware12.1 x86 source-d4unknownsource
Slackware12.1 x86 source-d5unknownsource
Slackware12.1 x86 source-d6unknownsource
Slackware12.2 x86 install-d1unknownsource
Slackware12.2 x86 install-d2unknownsource
Slackware12.2 x86 install-d3unknownsource
Slackware12.2 x86 install-dvdunknownsource
Slackware12.2 x86 source-d4unknownsource
Slackware12.2 x86 source-d5unknownsource
Slackware12.2 x86 source-d6unknownsource
Slackware13.0 x86 install-d1unknownsource
Slackware13.0 x86 install-d2unknownsource
Slackware13.0 x86 install-d3unknownsource
Slackware13.0 x86 install-dvdunknownsource
Slackware13.0 x86 source-d4unknownsource
Slackware13.0 x86 source-d5unknownsource
Slackware13.0 x86 source-d6unknownsource
Slackware13.1 x86 install-d1unknownsource
Slackware13.1 x86 install-d2unknownsource
Slackware13.1 x86 install-d3unknownsource
Slackware13.1 x86 install-dvdunknownsource
Slackware13.1 x86 source-d4unknownsource
Slackware13.1 x86 source-d5unknownsource
Slackware13.1 x86 source-d6unknownsource
Slackware13.37 x86 install-d1unknownsource
Slackware13.37 x86 install-d2unknownsource
Slackware13.37 x86 install-d3unknownsource
Slackware13.37 x86 install-d4unknownsource
Slackware13.37 x86 install-dvdunknownsource
Slackware13.37 x86 source-d5unknownsource
Slackware13.37 x86 source-d6unknownsource
Slackware14.0 x86 install-d1unknownsource
Slackware14.0 x86 install-d2unknownsource
Slackware14.0 x86 install-d3unknownsource
Slackware14.0 x86 install-d4unknownsource
Slackware14.0 x86 install-dvdunknownsource
Slackware14.0 x86 source-d5unknownsource
Slackware14.0 x86 source-d6unknownsource
Slackware14.0 x86 source-dvdunknownsource
Slackware14.1 x86 install-d1unknownsource
Slackware14.1 x86 install-d2unknownsource
Slackware14.1 x86 install-d3unknownsource
Slackware14.1 x86 install-d4unknownsource
Slackware14.1 x86 install-dvdunknownsource
Slackware14.1 x86 source-d5unknownsource
Slackware14.1 x86 source-d6unknownsource
Slackware14.1 x86 source-dvdunknownsource
Slackware14.2 x86 install-d1unknownsource
Slackware14.2 x86 install-d2unknownsource
Slackware14.2 x86 install-d3unknownsource
Slackware14.2 x86 install-d4unknownsource
Slackware14.2 x86 install-d5unknownsource
Slackware14.2 x86 install-dvdunknownsource
Slackware14.2 x86 source-d6unknownsource
Slackware14.2 x86 source-dvdunknownsource
Slackware13.0 x86_64 install-dvdunknownsource
Slackware13.1 x86_64 install-dvdunknownsource
Slackware13.37 x86_64 install-dvdunknownsource
Slackware14.0 x86_64 install-dvdunknownsource
Slackware14.1 x86_64 install-dvdunknownsource
Slackware14.2 x86_64 install-dvdunknownsource

References

  1. http://security.gentoo.org/glsa/glsa-200405-05.xml
  2. http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000752.1-1
  3. http://www.mandriva.com/security/advisories?name=MDKSA-2004:031
  4. http://www.redhat.com/support/errata/RHSA-2004-174.html
  5. http://www.redhat.com/support/errata/RHSA-2004-175.html
  6. http://www.securityfocus.com/bid/10178
  7. http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404389
  8. https://exchange.xforce.ibmcloud.com/vulnerabilities/15904
  9. https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10115
  10. https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A979
  11. http://security.gentoo.org/glsa/glsa-200405-05.xml
  12. http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000752.1-1
  13. http://www.mandriva.com/security/advisories?name=MDKSA-2004:031
  14. http://www.redhat.com/support/errata/RHSA-2004-174.html
  15. http://www.redhat.com/support/errata/RHSA-2004-175.html
  16. http://www.securityfocus.com/bid/10178
  17. http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404389
  18. https://exchange.xforce.ibmcloud.com/vulnerabilities/15904
  19. https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10115
  20. https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A979