VULNERABILITY INTELLIGENCE

CVE-2001-0529

CVSS score7.2 HIGH
EPSS probability0.62%
CISA KEVNot currently listed
Published2001-08-14
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.

Primary references