CVE-2004-0559

Fixed in a distro release EPSS <1%

The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.

Published 2004-09-24 · CVE record · OSV

Products: usermin, webmin, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server

Distro releases