CVE:CVE-2001-0138
CNNVD:CNNVD-200103-007
wu-ftpd 2.6.1-6版本的privatepw程序存在漏洞。本地用户借助符号链接攻击改写任意文件。
solution:Upgrade immunix immunix to a higher version than 7.0_beta,and avoid the version 7.0_beta; Upgrade debian debian_linux to a higher version than 2.2,and avoid the version 2.2; Upgrade mandrakesoft mandrake_linux to a higher version than 6.0,6.1,7.0,7.1,7.2,and avoid the version 6.0,6.1,7.0,7.1,7.2; Upgrade mandrakesoft mandrake_linux_corporate_server to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade redhat linux to a higher version than 7.0,and avoid the version 7.0