PUBLISHED DATE: August 12, 2002CVE-2002-0658:
OSSP mm library (libmm)...

Description

OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack.

Products

• OSSP MM 1.0.0
• OSSP MM 1.0.10
• OSSP mm 1.0.11
• OSSP mm 1.0.12
• OSSP mm 1.0.1
• OSSP mm 1.0.2
• OSSP mm 1.0.3
• OSSP mm 1.0.4
• OSSP mm 1.0.5
• OSSP mm 1.0.6
• OSSP mm 1.0.7
• OSSP mm 1.0.8
• OSSP mm 1.0.9
• OSSP mm 1.1.0
• OSSP mm 1.1.1
• OSSP mm 1.1.2
• OSSP mm 1.1.3

Questions to Ask Vendors

1. Can you confirm whether your systems are affected by CVE-2002-0658, and if so, what steps are you currently taking to mitigate this vulnerability?
2. What is your estimated timeline for fully resolving CVE-2002-0658 in your products or services, and how will you communicate updates on this issue to us as your customer?

Recommended Actions

• Check out the advisory links provided below.

References

• https://nvd.nist.gov/vuln/detail/CVE-2002-0658