CVE-2001-1092 : msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink atta

msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.

Published 2001-09-10 04:00:00

Updated 2017-12-19 02:29:33

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2001-1092

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ % EPSS Score History EPSS FAQ

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

Compaq » Tru64 » Version: 4.0f
cpe:2.3:o:compaq:tru64:4.0f:*:*:*:*:*:*:*
Matching versions
Compaq » Tru64 » Version: 4.0g
cpe:2.3:o:compaq:tru64:4.0g:*:*:*:*:*:*:*
Matching versions
Compaq » Tru64 » Version: 4.0d
cpe:2.3:o:compaq:tru64:4.0d:*:*:*:*:*:*:*
Matching versions
Compaq » Tru64 » Version: 4.0e
cpe:2.3:o:compaq:tru64:4.0e:*:*:*:*:*:*:*
Matching versions