Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NEdit 临时文件符号链接漏洞
Vulnerability Description
CVE(CAN) ID: CAN-2001-0556 NEdit 是 Nirvana editor 的缩写，一种自由发放的文本编辑器，很多Unix系统携带 它。NEdit提供了一个图形化前端，功能类似微软平台和苹果机上的文本编辑器。 当用户使用NEdit时，会在当前目录下创建使用两个临时文件，一个是~filename，一 个是filename.bck。如果当前目录是全局可写的，恶意的本地用户可以提前建立两个 符号链接，使用NEdit的用户可能破坏任意自己有权写入的文件。 <* 来源：Jarno Huusk
CVSS Information
N/A
Vulnerability Type
N/A