漏洞信息详情

WMTV配置文件符号链接漏洞

• CNNVD编号：CNNVD-200205-106
• 危害等级： 低危
  
• CVE编号： CVE-2002-0248
• 漏洞类型： 访问验证错误
• 发布时间： 2002-05-29
• 威胁类型： 本地
• 更新时间： 2005-10-20
• 厂        商： wliang
• 漏洞来源： Discovery of this ...

漏洞简介

WMTV 0.6.5及其更早版本存在漏洞。本地用户可以借助配置文件上的符号链接攻击修改任意文件。

漏洞公告

Upgrades are available. wliang wmtv 0.6.5

• Debian wmtv_0.6.5-2potato2_alpha.deb http://security.debian.org/dists/stable/updates/main/binary-alpha/wmtv _0.6.5-2potato2_alpha.deb
• Debian wmtv_0.6.5-2potato2_arm.deb http://security.debian.org/dists/stable/updates/main/binary-arm/wmtv_0 .6.5-2potato2_arm.deb
• Debian wmtv_0.6.5-2potato2_i386.deb http://security.debian.org/dists/stable/updates/main/binary-i386/wmtv_ 0.6.5-2potato2_i386.deb
• Debian wmtv_0.6.5-2potato2_m68k.deb http://security.debian.org/dists/stable/updates/main/binary-m68k/wmtv_ 0.6.5-2potato2_m68k.deb
• Debian wmtv_0.6.5-2potato2_powerpc.deb http://security.debian.org/dists/stable/updates/main/binary-powerpc/wm tv_0.6.5-2potato2_powerpc.deb
• Debian wmtv_0.6.5-2potato2_sparc.deb http://security.debian.org/dists/stable/updates/main/binary-sparc/wmtv _0.6.5-2potato2_sparc.deb

参考网址

来源: DEBIAN 名称: DSA-108 链接:http://www.debian.org/security/2002/dsa-108 来源: XF 名称: wmtv-config-file-symlink(8110) 链接:http://www.iss.net/security_center/static/8110.php 来源: BID 名称: 4052 链接:http://www.securityfocus.com/bid/4052

受影响实体

• Wliang Wmtv:0.6.5  
• Wliang Wmtv:0.6.5  

补丁

暂无