CVE-2001-1383

MediumCVSS 6.2/10Last modified Jun 16, 2026

Description

initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized operations on files.

Metrics

CVSS 2.0 6.2/10AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://rhn.redhat.com/errata/RHSA-2001-110.htmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/7177.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/3367
http://rhn.redhat.com/errata/RHSA-2001-110.htmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/7177.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/3367

Timeline

Published: Sep 26, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-13847.2ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or s CVE-2001-13855.0The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for othe CVE-2001-13867.5WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD CVE-2001-13872.1iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes ipta CVE-2001-13885.0iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users t CVE-2001-13897.5Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of s CVE-2001-13906.2Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages.CVE-2001-13915.5Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.CVE-2001-13922.1The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloadin CVE-2001-13932.1Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).CVE-2001-13942.1Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denial of service.CVE-2001-13953.6Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.