Unrated severityNVD Advisory· Published Dec 11, 2001· Updated Jun 16, 2026
CVE-2001-0890
CVE-2001-0890
Description
Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.
Affected products
8cpe:2.3:a:sane:sane:1.0.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:sane:sane:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:sane:sane:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:sane:sane:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:sane:sane:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:sane:sane:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:sane:sane:1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:sane:sane:1.0.6:*:*:*:*:*:*:*
- (no CPE)range: <=1.0.3
Patches
Vulnerability mechanics
References
3- rhn.redhat.com/errata/RHSA-2001-171.htmlnvdPatchVendor Advisory
- www.iss.net/security_center/static/7714.phpnvdPatchVendor Advisory
- www.securityfocus.com/bid/3987nvd
News mentions
0No linked articles in our index yet.