CVE-2001-0946
apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins.
- Score
- CVSS 2.0 3.6 Low
- Status
- Modified - cve@mitre.org
- Published
- 2001-12-04
- Last modified
- 2024-08-08
Affected products
References
- http://marc.info/?l=bugtraq&m=100743394701962&w=2
- http://www.osvdb.org/5493
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56389
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8268