1.2 CVE-2002-0296

Exploit
 

The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
https://nvd.nist.gov/vuln/detail/CVE-2002-0296

Categories

CWE-NVD-Other

References


 

CPE

cpe start end
Configuration 1
cpe:2.3:a:tarantella:tarantella_enterprise:3.0:*:*:*:*:*:*:*
cpe:2.3:a:tarantella:tarantella_enterprise:3.01:*:*:*:*:*:*:*
cpe:2.3:a:tarantella:tarantella_enterprise:3.10:*:*:*:*:*:*:*
cpe:2.3:a:tarantella:tarantella_enterprise:3.11:*:*:*:*:*:*:*
cpe:2.3:a:tarantella:tarantella_enterprise:3.20:*:*:*:*:*:*:*


REMEDIATION




EXPLOITS


Exploit-db.com

id description date
21290 Tarantella Enterprise 3 - Symbolic Link 2002-02-19 00:00:00

Other (github, ...)

Url
4115
20020219 Another local root vulnerability during installation of Tarantella Enterprise 3.


CAPEC


Common Attack Pattern Enumerations and Classifications

id description severity
No entry


MITRE