VYPR
Unrated severityNVD Advisory· Published Mar 12, 2001· Updated Apr 16, 2026

CVE-2001-0138

CVE-2001-0138

Description

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.

Affected products

14
  • cpe:2.3:a:immunix:immunix:7.0_beta:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:debian:debian_linux:2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:2.2:*:68k:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:2.2:*:alpha:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:2.2:*:arm:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:2.2:*:powerpc:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:2.2:*:sparc:*:*:*:*:*
  • cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*
    • cpe:2.3:o:mandrakesoft:mandrake_linux:7.2:*:*:*:*:*:*:*
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:linux:7.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.