CVE-2001-1102

MediumCVSS 6.2/10Last modified Jun 16, 2026

Description

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.

Metrics

CVSS 2.0 6.2/10AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/212824Patch, Vendor Advisory
http://www.securityfocus.com/bid/3300Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7094
http://www.securityfocus.com/archive/1/212824Patch, Vendor Advisory
http://www.securityfocus.com/bid/3300Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7094

Timeline

Published: Sep 8, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-11037.5FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, CVE-2001-11047.5SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.CVE-2001-11057.5RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attac CVE-2001-11067.5The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwo CVE-2001-11075.0SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the ser CVE-2001-11087.5Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the re CVE-2001-11097.5Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the CVE-2001-11105.0EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which c CVE-2001-11114.6EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.CVE-2001-11127.5Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of ch CVE-2001-111310.0Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories CVE-2001-11147.5book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter.