Filtered by vendor Utempter Subscriptions
Filtered by product Utempter Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2004-0233 4 Redhat, Sgi, Slackware and 1 more 5 Enterprise Linux, Linux, Propack and 2 more 2024-08-08 N/A
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.