CVE-2001-1448

Description

Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc scripts.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/10616

https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-1428

http://www.securityfocus.com/archive/1/246343

http://www.kb.cert.org/vuls/id/157795

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS