Search vulnerabilities

Results 1

Export CSV
CVE-2004-0233

security flaw

Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.

CVSS 2.0 · 2.1 Low EPSS 1.1% KEV · Not listed
Vendors
Redhat Sgi Slackware and 1 more
Products