CVE-2003-1279

S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on (1) /tmp/__F8499 by Sqpe, (2)…

published November 16, 2005

CVSS
—
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on (1) /tmp/__F8499 by Sqpe, (2) /tmp/PRINT.$$.out by PRINT, (3) /tmp/SUBST$PID.TXT and /tmp/ed.cmds$PID by mustfix.hlinks, (4) /tmp/file.1 and /tmp/file.2 by sas_get, (5) /tmp/file.1 by sas_vars, and (6) /tmp/sgml2html$$tmp /tmp/sgml2html$$tmp1 /tmp/sgml2html$$tmp2 by sglm2html.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00331 · 24.9th percentile
Published
2005-11-16T07:37Z
EPSS history
Timeline
  • 16 NOV 07:37Z
    S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on (1) /tmp/__F8499 by Sqpe, (2)…
    cvelistv5