CVE-2001-1101 Vulnerability Details

  /     /     /  

CVE-2001-1101 Metadata Quick Info

CVE Published: 15/03/2002 | CVE Updated: 08/08/2024 | CVE Year: 2001
Source: mitre | Vendor: n/a | Product: n/a
Status : PUBLISHED

---

CVE-2001-1101 Description

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of \'.log\' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in \'.log\', or (2) local users to overwrite arbitrary files via a symlink attack.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: n/a
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).