CVE-2001-0890

Published: Dec 11, 2001Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.

Affected (7)

Products: Sane: Sane

Sane

1 product

Sane

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Sane Sane	Version 1.0.0
Sane Sane	Version 1.0.1
Sane Sane	Version 1.0.2
Sane Sane	Version 1.0.3
Sane Sane	Version 1.0.4
Sane Sane	Version 1.0.5
Sane Sane	Version 1.0.6