CVE-2001-1448 in eDeveloperinfo

Summary

Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc scripts.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

04/21/2005

Disclosure

12/17/2001

CPE

ready

CVSS

5.9

EPSS

0.00151

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!