The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file.
References
Link | Resource |
---|---|
http://www.debian.org/security/2001/dsa-053 | Patch Vendor Advisory |
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-042.php3 | Patch Vendor Advisory |
http://www.nedit.org/archives/develop/2001-Feb/0391.html | |
http://www.novell.com/linux/security/advisories/2001_014_nedit.html | |
http://www.redhat.com/support/errata/RHSA-2001-061.html | Patch Vendor Advisory |
http://www.securityfocus.com/archive/1/180237 | |
http://www.securityfocus.com/bid/2667 | Exploit Patch Vendor Advisory |
http://www.debian.org/security/2001/dsa-053 | Patch Vendor Advisory |
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-042.php3 | Patch Vendor Advisory |
http://www.nedit.org/archives/develop/2001-Feb/0391.html | |
http://www.novell.com/linux/security/advisories/2001_014_nedit.html | |
http://www.redhat.com/support/errata/RHSA-2001-061.html | Patch Vendor Advisory |
http://www.securityfocus.com/archive/1/180237 | |
http://www.securityfocus.com/bid/2667 | Exploit Patch Vendor Advisory |
Configurations
History
20 Nov 2024, 23:35
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.debian.org/security/2001/dsa-053 - Patch, Vendor Advisory | |
References | () http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-042.php3 - Patch, Vendor Advisory | |
References | () http://www.nedit.org/archives/develop/2001-Feb/0391.html - | |
References | () http://www.novell.com/linux/security/advisories/2001_014_nedit.html - | |
References | () http://www.redhat.com/support/errata/RHSA-2001-061.html - Patch, Vendor Advisory | |
References | () http://www.securityfocus.com/archive/1/180237 - | |
References | () http://www.securityfocus.com/bid/2667 - Exploit, Patch, Vendor Advisory |
Information
Published : 2001-08-22 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2001-0556
Mitre link : CVE-2001-0556
CVE.ORG link : CVE-2001-0556
JSON object : View
Products Affected
nedit
- nedit
CWE