exploitDog

CVE-2003-0885

Опубликовано: 31 дек. 2003

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the (1) apple2, (2) xanalogtv, and (3) pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack.

Ссылки

http://bugs.gentoo.org/show_bug.cgi?id=41253
Exploit
Patch
Vendor Advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182286
Vendor Advisory
http://bugs.gentoo.org/show_bug.cgi?id=41253
Exploit
Patch
Vendor Advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182286
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:xscreensaver:xscreensaver:4.14:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00361

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2003-0885

debian

больше 21 года назад

Xscreensaver 4.14 contains certain debugging code that should have bee ...

GHSA-588w-fjff-4h69

github

больше 3 лет назад

Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the (1) apple2, (2) xanalogtv, and (3) pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack.

EPSS

Процентиль: 58%

0.00361

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other