CVE-2002-1838

Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary files.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-09-16

Affected products

• Charities.cron (Steve Sachs)

References

• http://www.securityfocus.com/bid/4869
• http://www.stevesachs.com/charities.cron_CHANGELOG