VDB

GCVE-110-CERTCC-2001-579928

GCVE-110-CERTCC-2001-579928
Advisory Published
Vulnetix · Advisory published January 10, 2001
diffutils, a set of utilities distributed with many versions of linux, contains a utility called sdiff, which creates temporary files of predictable names in an insecure fashion. Using a symbolic link attack, an intruder can cause overwrite of any file writable by the user executing sdiff.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact12population10exploitation0widely_known15score_current4.5ease_of_exploitation10

Aliases

CVE-2001-0117

References

diffutils sdiff creates temporary files insecurely
advisory
diffutils sdiff creates temporary files insecurely
url
diffutils sdiff creates temporary files insecurely
url
diffutils sdiff creates temporary files insecurely
url
diffutils sdiff creates temporary files insecurely
url
diffutils sdiff creates temporary files insecurely
url

Browse GCVE Records

73,877 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›