CVE

CVE-2002-0157

Date: (C)2002-05-16   (M)2023-12-22

Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.6
Exploit Score: 3.9
Impact Score: 6.4
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

http://online.securityfocus.com/archive/1/270691/2002-04-29/2002-05-05/0

BID-4373

RHSA-2002:064

nautilus-metafile-xml-symlink(8995)