CVE-2001-0736

Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2001-10-18

Last modified

2024-08-08

Affected products

• Secure Linux (Engardelinux)
• Immunix (Immunix)
• Mandrake Linux (Mandrakesoft)
• Mandrake Linux Corporate Server (Mandrakesoft)
• Linux (Redhat)
• Pine (University Of Washington)

References

• http://marc.info/?l=bugtraq&m=98749102621604&w=2
• http://marc.info/?l=bugtraq&m=99106787825229&w=2
• http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-047.php3?dis=8.0
• http://www.redhat.com/support/errata/RHSA-2001-042.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6367