CVE-2002-0658

NameCVE-2002-0658
DescriptionOSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-137

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
mm (PTS)bullseye1.4.2-6fixed
sid, trixie, bookworm1.4.2-7fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
mmsourcewoody1.1.3-6.1DSA-137
mmsource(unstable)1.1.3-7

Search for package or bug name: Reporting problems