VYPR

Utempter

by Utempter

CVEs (1)

  • CVE-2004-0233Aug 18, 2004
    risk 0.03cvss epss 0.01

    Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.