CVE-2004-0559

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-0559
The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://secunia.com/advisories/12488/ Patch Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml Patch Vendor Advisory
http://www.securityfocus.com/bid/11153 Patch Vendor Advisory
http://www.webmin.com/uchanges-1.089.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/17299
http://secunia.com/advisories/12488/ Patch Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml Patch Vendor Advisory
http://www.securityfocus.com/bid/11153 Patch Vendor Advisory
http://www.webmin.com/uchanges-1.089.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/17299
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:usermin:usermin:1.000:*:*:*:*:*:*:*
cpe:2.3:a:usermin:usermin:1.010:*:*:*:*:*:*:*
cpe:2.3:a:usermin:usermin:1.020:*:*:*:*:*:*:*
cpe:2.3:a:usermin:usermin:1.030:*:*:*:*:*:*:*
cpe:2.3:a:usermin:usermin:1.040:*:*:*:*:*:*:*
cpe:2.3:a:usermin:usermin:1.051:*:*:*:*:*:*:*
cpe:2.3:a:usermin:usermin:1.060:*:*:*:*:*:*:*
cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:*
cpe:2.3:a:usermin:usermin:1.080:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.0.00:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.0.20:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.0.50:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.0.60:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.0.70:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.0.80:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.0.90:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.1.00:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.1.10:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.1.21:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.1.30:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.1.40:*:*:*:*:*:*:*
cpe:2.3:a:webmin:webmin:1.1.50:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*
History

20 Nov 2024, 23:48

Type Values Removed Values Added
References () http://secunia.com/advisories/12488/ - Patch, Vendor Advisory () http://secunia.com/advisories/12488/ - Patch, Vendor Advisory
References () http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml - Patch, Vendor Advisory () http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/11153 - Patch, Vendor Advisory () http://www.securityfocus.com/bid/11153 - Patch, Vendor Advisory
References () http://www.webmin.com/uchanges-1.089.html - () http://www.webmin.com/uchanges-1.089.html -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/17299 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/17299 -
Information

Published : 2004-10-20 04:00

Updated : 2024-11-20 23:48

NVD link : CVE-2004-0559

Mitre link : CVE-2004-0559

CVE.ORG link : CVE-2004-0559

JSON object : View

Products Affected

usermin

  • usermin

webmin

  • webmin

mandrakesoft

  • mandrake_linux_corporate_server
  • mandrake_linux
CWE
NVD-CWE-Other