CVE Vulnerabilities

CVE-2003-1246

Published: Dec 31, 2003 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on winntsystem32drivers using the subst command.

Affected Software

Name Vendor Start Version End Version
Integrity_protection_driver Pedestal_software 1.2 1.2
Integrity_protection_driver Pedestal_software 1.3 1.3

References