Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xscreensaver | Xscreensaver | 4.05_5cl | 4.05_5cl |
| Xscreensaver | Xscreensaver | 4.05_6 | 4.05_6 |
| Xscreensaver | Xscreensaver | 4.05_6a | 4.05_6a |
| Xscreensaver | Xscreensaver | 4.05_150 | 4.05_150 |
| Xscreensaver | Xscreensaver | 4.07_2 | 4.07_2 |
| Xscreensaver | Xscreensaver | 4.08_29135cl | 4.08_29135cl |
| Xscreensaver | Xscreensaver | 4.09_0 | 4.09_0 |
| Xscreensaver | Xscreensaver | 4.10_4 | 4.10_4 |
| Xscreensaver | Xscreensaver | 4.10_6 | 4.10_6 |
| Xscreensaver | Xscreensaver | 4.10_8 | 4.10_8 |
| Xscreensaver | Xscreensaver | 4.10_15 | 4.10_15 |
| Xscreensaver | Xscreensaver | 4.11_0 | 4.11_0 |
| Xscreensaver | Xscreensaver | 4.12_58 | 4.12_58 |
| Xscreensaver | Xscreensaver | 4.12_62 | 4.12_62 |
| Xscreensaver | Xscreensaver | 4.14_0 | 4.14_0 |
| Xscreensaver | Xscreensaver | 4.14_2 | 4.14_2 |
| Xscreensaver | Xscreensaver | 4.14_4 | 4.14_4 |
| Xscreensaver | Xscreensaver | 4.14_5 | 4.14_5 |
| Red Hat Enterprise Linux 3 | RedHat | xscreensaver-1:4.10-20 | * |