Mandrake Linux Security Advisory : mm (MDKSA-2002:045)

Medium Nessus Plugin ID 13948


The remote Mandrake Linux host is missing one or more security updates.


Marcus Meissner and Sebastian Krahmer discovered a temporary file vulnerability in the mm library which is used by the Apache webserver.
This vulnerability can be exploited to obtain root privilege if shell access to the apache user (typically apache or nobody) is already obtained.


Update the affected packages.

Plugin Details

Severity: Medium

ID: 13948

File Name: mandrake_MDKSA-2002-045.nasl

Version: $Revision: 1.15 $

Type: local

Published: 2004/07/31

Modified: 2013/05/31

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 6.2

Vector: CVSS2#AV:L/AC:H/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:libmm1, p-cpe:/a:mandriva:linux:libmm1-devel, p-cpe:/a:mandriva:linux:mm, p-cpe:/a:mandriva:linux:mm-devel, cpe:/o:mandrakesoft:mandrake_linux:7.1, cpe:/o:mandrakesoft:mandrake_linux:7.2, cpe:/o:mandrakesoft:mandrake_linux:8.0, cpe:/o:mandrakesoft:mandrake_linux:8.1, cpe:/o:mandrakesoft:mandrake_linux:8.2

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 2002/07/29

Reference Information

CVE: CVE-2002-0658

MDKSA: 2002:045