CVE-2001-1256

LowCVSS 1.2/10Last modified Jun 16, 2026

Description

kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files.

Metrics

CVSS 2.0 1.2/10AV:L/AC:H/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://ciac.llnl.gov/ciac/bulletins/l-093.shtmlPatch, Vendor Advisory
http://online.securityfocus.com/advisories/3354Vendor Advisory
http://www.kb.cert.org/vuls/id/127435US Government Resource
http://www.kb.cert.org/vuls/id/TJSL-4Z5Q92US Government Resource
http://www.securityfocus.com/archive/1/188568Vendor Advisory
http://www.securityfocus.com/bid/2821
https://exchange.xforce.ibmcloud.com/vulnerabilities/6656
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5628
http://ciac.llnl.gov/ciac/bulletins/l-093.shtmlPatch, Vendor Advisory
http://online.securityfocus.com/advisories/3354Vendor Advisory
http://www.kb.cert.org/vuls/id/127435US Government Resource
http://www.kb.cert.org/vuls/id/TJSL-4Z5Q92US Government Resource
http://www.securityfocus.com/archive/1/188568Vendor Advisory
http://www.securityfocus.com/bid/2821
https://exchange.xforce.ibmcloud.com/vulnerabilities/6656
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5628

Timeline

Published: Jun 11, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-12577.5Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbit CVE-2001-12583.6Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password CVE-2001-12595.0Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.CVE-2001-126010.0Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by CVE-2001-12615.0Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and p CVE-2001-12627.5Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided st CVE-2001-12635.0telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters CVE-2001-126410.0Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges.CVE-2001-12657.5Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbi CVE-2001-12665.0Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .CVE-2001-12672.1Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction v CVE-2001-12682.1Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction