WMTV配置文件符号链接漏洞

漏洞信息详情

WMTV配置文件符号链接漏洞

• CNNVD编号：CNNVD-200205-106
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2002-0248
  
• 漏洞类型：
  
  
  访问验证错误
  
• 发布时间：
  
  2002-05-29
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  wliang
• 漏洞来源：
  Discovery of this …

WMTV 0.6.5及其更早版本存在漏洞。本地用户可以借助配置文件上的符号链接攻击修改任意文件。

Upgrades are available.
wliang wmtv 0.6.5

• Debian wmtv_0.6.5-2potato2_alpha.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-alpha/wmtv
  _0.6.5-2potato2_alpha.deb
• Debian wmtv_0.6.5-2potato2_arm.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-arm/wmtv_0
  .6.5-2potato2_arm.deb
• Debian wmtv_0.6.5-2potato2_i386.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-i386/wmtv_
  0.6.5-2potato2_i386.deb
• Debian wmtv_0.6.5-2potato2_m68k.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-m68k/wmtv_
  0.6.5-2potato2_m68k.deb
• Debian wmtv_0.6.5-2potato2_powerpc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-powerpc/wm
  tv_0.6.5-2potato2_powerpc.deb
• Debian wmtv_0.6.5-2potato2_sparc.deb
  
  http://security.debian.org/dists/stable/updates/main/binary-sparc/wmtv
  _0.6.5-2potato2_sparc.deb

来源: DEBIAN
名称: DSA-108
链接:http://www.debian.org/security/2002/dsa-108

来源: XF
名称: wmtv-config-file-symlink(8110)
链接:http://www.iss.net/security_center/static/8110.php

来源: BID
名称: 4052
链接:http://www.securityfocus.com/bid/4052