CVE-2001-0529

OpenSSH < 2.9 - Unauthenticated Arbitrary File Deletion via Symlink Attack

Title source: llm

OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.

Core 12

Core References

Various Sources vendor-advisory x_refsource_immunix

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

Various Sources vendor-advisory x_refsource_openbsd

Exploit, Vendor Advisory mailing-list x_refsource_bugtraq

Vendor Advisory mailing-list x_refsource_bugtraq

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

Patch, Vendor Advisory vendor-advisory x_refsource_netbsd

Vendor Advisory vendor-advisory x_refsource_caldera

US Government Resource third-party-advisory x_refsource_cert-vn

Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

Vendor Advisory vendor-advisory x_refsource_conectiva

EPSS 0.0017

EPSS Percentile 37.3%

Status published

Products (1)

openbsd/openssh < 2.9

Published Aug 14, 2001

Tracked Since Feb 18, 2026