Symlink Attack Vulnerability in CDRDAO 1.1.4 and 1.1.5

Symlink Attack Vulnerability in CDRDAO 1.1.4 and 1.1.5

CVE-2002-0137 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.

Learn more about our User Device Pen Test.