Vulnerabilities > CVE-2003-0847 - Local Security vulnerability in Suse Linux 8.2

047910
CVSS 4.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
suse
exploit available

Summary

SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file.

Vulnerable Configurations

Part Description Count
OS
Suse
1

Exploit-Db

descriptionSuSE Linux Professional 8.2 SuSEWM Configuration File Insecure Temporary File Vulnerability. CVE-2003-0847. Local exploit for linux platform
idEDB-ID:23223
last seen2016-02-02
modified2003-10-06
published2003-10-06
reporterNash Leon
sourcehttps://www.exploit-db.com/download/23223/
titleSuSE Linux Professional 8.2 SuSEWM Configuration File Insecure Temporary File Vulnerability