CVE

CVE-2002-0658

Date: (C)2002-08-12   (M)2023-12-22

OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.2
Exploit Score: 1.9
Impact Score: 10.0
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: HIGH
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

BID-5352

CSSA-2002-032.0

DSA-137

FreeBSD-SN-02:05

HPSBTL0208-056

MDKSA-2002:045

RHSA-2002:153

RHSA-2002:154

RHSA-2002:156

RHSA-2002:163

RHSA-2002:164

RHSA-2003:158

SuSE-SA:2002:028

mm-tmpfile-symlink(9719)