Description
faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files.
References (1)
Core 1
Core References
Broken Link x_refsource_confirm
ftp://alpha.greenie.net/pub/mgetty/source/1.1/mgetty1.1.29-Nov25.tar.gz
Scores
CVSS v3
5.5
EPSS
0.0032
EPSS Percentile
23.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-59
Status
published
Products (1)
mgetty_project/mgetty
< 1.1.28
Published
Aug 18, 2003
Tracked Since
Feb 18, 2026