Vulnerability Details : CVE-2001-0138
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.
Exploit prediction scoring system (EPSS) score for CVE-2001-0138
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2001-0138
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
1.2
|
LOW | AV:L/AC:H/Au:N/C:N/I:P/A:N |
1.9
|
2.9
|
NIST |
References for CVE-2001-0138
Products affected by CVE-2001-0138
- cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*
- cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*