Vulnerabilities

TI-2002-02294 CVE-2002-2382 · GHSA-wp4j-mq44-xx7x

cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain…

LOW 31

cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00311 Published 2007-10-31 No fix listed CWE-59

TI-2004-02006 CVE-2004-2133 · GHSA-34fh-h7r7-h3wg

Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths…

LOW 22

Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link a…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00607 Published 2005-05-27 No fix listed

TI-2003-00564 CVE-2003-0606 · GHSA-4hw6-4vh8-v8hw

sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.

LOW 21

sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00321 Published 2003-08-01 No fix listed

Vulnerabilities

Filters

cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain…

Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths…

sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.