CVE ID:	CVE-2002-0658
Description:	OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack.
Test IDs:	1.3.6.1.4.1.25623.1.0.53400   1.3.6.1.4.1.25623.1.0.51238   1.3.6.1.4.1.25623.1.0.50821
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0658 BugTraq ID: 5352 http://www.securityfocus.com/bid/5352 Bugtraq: 20020730 [OpenPKG-SA-2002.007] OpenPKG Security Advisory (mm) (Google Search) Caldera Security Advisory: CSSA-2002-032.0 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-032.0.txt Debian Security Information: DSA-137 (Google Search) http://www.debian.org/security/2002/dsa-137 FreeBSD Security Advisory: FreeBSD-SN-02:05 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc HPdes Security Advisory: HPSBTL0208-056 http://online.securityfocus.com/advisories/4392 http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-045.php RedHat Security Advisories: RHSA-2002:153 http://rhn.redhat.com/errata/RHSA-2002-153.html RedHat Security Advisories: RHSA-2002:154 http://rhn.redhat.com/errata/RHSA-2002-154.html RedHat Security Advisories: RHSA-2002:156 http://rhn.redhat.com/errata/RHSA-2002-156.html RedHat Security Advisories: RHSA-2002:163 http://www.redhat.com/support/errata/RHSA-2002-163.html RedHat Security Advisories: RHSA-2002:164 http://rhn.redhat.com/errata/RHSA-2002-164.html RedHat Security Advisories: RHSA-2003:158 http://www.redhat.com/support/errata/RHSA-2003-158.html SuSE Security Announcement: SuSE-SA:2002:028 (Google Search) http://www.novell.com/linux/security/advisories/2002_028_mod_ssl.html XForce ISS Database: mm-tmpfile-symlink(9719) http://www.iss.net/security_center/static/9719.php