Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2001-1197

EPSS 0.07% · P21
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2001-1197

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
KDE2 klprfax_filter以不安全的方式创建临时文件漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
KDE2是一个免费的，开放源码的X Window系统窗口管理器，它由KDE项目组维护。 klprfax_filter是KDE2包括的一个实现传真功能的程序。 klprfax_filter在执行过程时创建临时文件存在问题，可能使本地攻击者访问到其他用户的文件。 klprfax_filter在执行过程中创建临时文件klprfax.filter时并不检查它是否已经存在，这样本地攻击者就可以通过创建符号连接指向其他用户有权限写的文件，当那个用户运行klprfax_filter时，则指向的文件就会被覆盖。如果roo
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2001-1197

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2001-1197

Please Login to view more intelligence information

Same Patch Batch · n/a · 2002-03-15 · 131 CVEs total

CVE-2001-1214Marcus Xenakis manual.php远程执行任意命令漏洞
CVE-2002-0103Oracle9iAS Web Cache权限提升漏洞
CVE-2002-0102Oracle9iAS Web Cache Null字符处理不当导致拒绝服务漏洞
CVE-2002-0101Microsoft Internet Explorer 安全漏洞
CVE-2002-0100AOLServer受口令保护的文件泄露漏洞
CVE-2002-0099Michael Lamont Savant Web服务器超长请求拒绝服务攻击漏洞
CVE-2001-1226AdCycle远程SQL查询修改漏洞。
CVE-2001-1225Hughes Technologies Mini SQL服务拒绝漏洞
CVE-2001-1224Les VanBrunt AdRotate Pro SQL命令注入漏洞
CVE-2001-1223ELSA Lancom 1100 Office不安全web管理漏洞
CVE-2001-1222Plesk Server Administrator 源代码泄露漏洞
CVE-2001-1221D-Link DWL-1000AP 无线局域网访问点'public'口令漏洞
CVE-2001-1220D-Link DWL-1000AP 无线局域网访问点明文密码漏洞
CVE-2001-1219Microsoft Internet Explorer 安全漏洞
CVE-2001-1218Microsoft IE for Solaris X Server拒绝服务漏洞
CVE-2001-1217Oracle 9i应用服务器PL/SQL Apache模块目录遍历漏洞
CVE-2001-1216Oracle 9i应用服务器PL/SQL Apache模块远程缓冲区溢出漏洞
CVE-2001-1204FrontPage Total PC Solutions PHP Rocket Add-in目录遍历漏洞
CVE-2001-1202DeleGate跨站脚本漏洞
CVE-2001-1198HP-UX rlpdaemon任意创建日志文件漏洞

Showing top 20 of 131 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2001-1197

No comments yet

Leave a comment