CVE-2003-0603

Опубликовано: 27 авг. 2003

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary files via a symlink attack on temporary files that are created in directories with group-writable or world-writable permissions.

Ссылки

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653
Vendor Advisory
http://www.bugzilla.org/security/2.16.2/
http://www.securityfocus.com/bid/7412
Patch
Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653
Vendor Advisory
http://www.bugzilla.org/security/2.16.2/
http://www.securityfocus.com/bid/7412
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00092

Низкий

2.1 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2003-0603

debian

около 22 лет назад

Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versi ...

GHSA-3c2r-qjq2-2r45

github

больше 3 лет назад