nvd-json-data-feeds/CVE-2002/CVE-2002-06xx/CVE-2002-0658.json

{
  "id": "CVE-2002-0658",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2002-08-12T04:00:00.000",
  "lastModified": "2013-09-04T04:18:30.637",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack."
    },
    {
      "lang": "es",
      "value": "La librer\u00eda OSSF mm (libmm) anterior a 1.2.0 permite al usuario local de Apache ganar privilegios mediante ficheros temporales, posiblemente mediante un enlace simb\u00f3lico."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
          "accessVector": "LOCAL",
          "accessComplexity": "HIGH",
          "authentication": "NONE",
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.2
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 1.9,
        "impactScore": 10.0,
        "acInsufInfo": false,
        "obtainAllPrivilege": true,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "270D8217-749C-42AA-BFCF-29F30A005F33"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "19AD7B27-55CB-4B74-8FF8-51055303E237"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "563BCC1D-D9B7-4A4D-B236-80CD4F3CEA00"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D170FC-54D4-47E0-B2D1-DB595A856962"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "B9853936-1570-4EF1-91D2-DA3E75B5896B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "26C013B0-9AAC-40A0-9FC8-D28E1C0AEDFF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D97522C-3140-4321-AE49-381E950EC5B1"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B0B47A8-1730-44FA-BEB4-4EEDA53B9E06"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "89674C7D-1C76-490D-8357-69C395BBED51"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EB315F4-5225-4EA6-A48F-8AC7546B0155"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "034F3E12-D0ED-4533-8CA3-D7BDE44DFA51"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "1935CCB9-24A8-4B04-BBA7-5452B622A646"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "35D77BDD-F1F0-4E63-AFFE-E52F167A7E8C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4CFDE079-DBEE-43C4-A8E6-0BDF15E2E471"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B39122A-961C-4A63-BEA3-E45B14AC4053"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB1AE08F-D8B1-4A3E-B032-1A58408C79B5"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ossp:mm:1.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0EB8773A-D67C-4411-8AEB-00BC31A269A0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-032.0.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://online.securityfocus.com/advisories/4392",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2002-153.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2002-154.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2002-156.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2002-164.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2002/dsa-137",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.iss.net/security_center/static/9719.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-045.php",
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2002-163.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.redhat.com/support/errata/RHSA-2003-158.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/5352",
      "source": "cve@mitre.org"
    }
  ]
}