Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2002-0141: Maelstrom GPL lets local users replace others' files

CVE-2002-0141 · published 24 years ago

Summary

The Maelstrom GPL 3.0.1 program lets anyone with access to the computer create a special link that tricks the system into overwriting any file belonging to another Maelstrom user. This could let a malicious insider modify or delete important data. Apply the provided update or patch from the vendor as soon as possible to stop the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
maelstrom	maelstrom_gpl	3.0.1 `cpe:2.3:a:maelstrom:maelstrom_gpl:3.0.1:::::::*`

Original advisory text

Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file.

References

http://online.securityfocus.com/archive/1/251419 Patch Vendor Advisory
http://www.iss.net/security_center/static/7939.php Vendor Advisory
http://www.securityfocus.com/bid/3911

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

1.2 Low

Exploitation

<1% chance of attack within 30 days

Timeline

Published25 Mar 2002

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2002-0141 · NVD

Track software like this

Free during beta