Description
uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which allows local users to execute arbitrary commands by modifying the temporary file before it is moved.
Metrics
CVSS 2.0 7.2/10
AV:L/AC:L/Au:N/C:C/I:C/A:CAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0431.html
- http://www.securityfocus.com/bid/1519Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5023
- http://archives.neohapsis.com/archives/bugtraq/2000-07/0431.html
- http://www.securityfocus.com/bid/1519Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5023
Timeline
- Published
- Oct 20, 2000
- Last modified
- Jun 16, 2026
- NVD status
- Modified