Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2002-0105

EPSS 0.15% · P35
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-0105

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
UnixWare CDE DTLogin Log目录不安全权限漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Unixware是一款Caldera维护的商用UNIX操作系统，其中dtlogin工具允许用户远程或者本地登陆到CDE会话，dtlogin把错误日志记录到/var/dt/Xerrors文件中。 UnixWare 7.1默认安装下对错误日志目录权限设置存在漏洞，可以导致本地攻击者进行符号连接攻击。 UnixWare 7.1默认把CDE错误日志目录安装在/var/dt，并设置777的目录权限，本地攻击者可以利用符号连接把日志文件连接到任意系统文件，当错误并记录时，导致错误信息记录到被连接的任意系统文件，可以导
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-0105

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-0105

请登录查看更多情报信息。

Same Patch Batch · n/a · 2002-03-15 · 131 CVEs total

CVE-2001-1213DataWizard FtpXQ 缺省特权帐号权限漏洞
CVE-2002-0102Oracle9iAS Web Cache Null字符处理不当导致拒绝服务漏洞
CVE-2002-0101Microsoft Internet Explorer 安全漏洞
CVE-2002-0100AOLServer受口令保护的文件泄露漏洞
CVE-2002-0099Michael Lamont Savant Web服务器超长请求拒绝服务攻击漏洞
CVE-2001-1226AdCycle远程SQL查询修改漏洞。
CVE-2001-1225Hughes Technologies Mini SQL服务拒绝漏洞
CVE-2001-1224Les VanBrunt AdRotate Pro SQL命令注入漏洞
CVE-2001-1223ELSA Lancom 1100 Office不安全web管理漏洞
CVE-2001-1222Plesk Server Administrator 源代码泄露漏洞
CVE-2001-1221D-Link DWL-1000AP 无线局域网访问点'public'口令漏洞
CVE-2001-1220D-Link DWL-1000AP 无线局域网访问点明文密码漏洞
CVE-2001-1219Microsoft Internet Explorer 安全漏洞
CVE-2001-1218Microsoft IE for Solaris X Server拒绝服务漏洞
CVE-2001-1217Oracle 9i应用服务器PL/SQL Apache模块目录遍历漏洞
CVE-2001-1216Oracle 9i应用服务器PL/SQL Apache模块远程缓冲区溢出漏洞
CVE-2001-1214Marcus Xenakis manual.php远程执行任意命令漏洞
CVE-2001-1202DeleGate跨站脚本漏洞
CVE-2001-1198HP-UX rlpdaemon任意创建日志文件漏洞
CVE-2001-1197KDE2 klprfax_filter以不安全的方式创建临时文件漏洞

Showing top 20 of 131 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-0105

No comments yet

Leave a comment