Description
apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins.
Metrics
CVSS 2.0 3.6/10
AV:L/AC:L/Au:N/C:N/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://marc.info/?l=bugtraq&m=100743394701962&w=2
- http://www.osvdb.org/5493
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56389Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8268
- http://marc.info/?l=bugtraq&m=100743394701962&w=2
- http://www.osvdb.org/5493
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56389Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8268
Timeline
- Published
- Dec 4, 2001
- Last modified
- Jun 16, 2026
- NVD status
- Modified