Vulnerabilities > CVE-2001-1066 - Symbolic Link vulnerability in Netscape 6 Temp File

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
local
low complexity
sun

Summary

ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack.

Vulnerable Configurations

Part Description Count
OS
Sun
1