Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026

CVE-2002-2001

Description

jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.

Affected products

Jmcce/Jmcce
cpe:2.3:a:jmcce:jmcce:1.3.8:*:*:*:*:*:*:*
Mandrakesoft/Mandrake Linux
cpe:2.3:o:mandrakesoft:mandrake_linux:8.1:*:*:*:*:*:*:*
Mandrake Linux/jmccellm-create
Range: = 1.3.8

Patches

Vulnerability mechanics

References

www.iss.net/security_center/static/7980.phpnvdPatch
www.securityfocus.com/bid/3940nvdPatch
www.mandriva.com/security/advisoriesnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000