VulnerabilityModified
CVE-2001-0890
Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.
LOW 2.1EPSS 0.38%
Does this matter?
Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.
Description
Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 0.38% probability · 32th percentile
- CISA KEV
- Not listed
- Affected
- sane/sane
- Source
- cve@mitre.org
References
- http://rhn.redhat.com/errata/RHSA-2001-171.htmlPatch, Vendor Advisory
- http://www.iss.net/security_center/static/7714.phpPatch, Vendor Advisory
- http://www.securityfocus.com/bid/3987
- http://rhn.redhat.com/errata/RHSA-2001-171.htmlPatch, Vendor Advisory
- http://www.iss.net/security_center/static/7714.phpPatch, Vendor Advisory
- http://www.securityfocus.com/bid/3987
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.