CVE Vulnerabilities

CVE-2003-1294

Published: Dec 31, 2003 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.

Affected Software

Name Vendor Start Version End Version
Xscreensaver Xscreensaver 4.05_5cl 4.05_5cl
Xscreensaver Xscreensaver 4.05_6 4.05_6
Xscreensaver Xscreensaver 4.05_6a 4.05_6a
Xscreensaver Xscreensaver 4.05_150 4.05_150
Xscreensaver Xscreensaver 4.07_2 4.07_2
Xscreensaver Xscreensaver 4.08_29135cl 4.08_29135cl
Xscreensaver Xscreensaver 4.09_0 4.09_0
Xscreensaver Xscreensaver 4.10_4 4.10_4
Xscreensaver Xscreensaver 4.10_6 4.10_6
Xscreensaver Xscreensaver 4.10_8 4.10_8
Xscreensaver Xscreensaver 4.10_15 4.10_15
Xscreensaver Xscreensaver 4.11_0 4.11_0
Xscreensaver Xscreensaver 4.12_58 4.12_58
Xscreensaver Xscreensaver 4.12_62 4.12_62
Xscreensaver Xscreensaver 4.14_0 4.14_0
Xscreensaver Xscreensaver 4.14_2 4.14_2
Xscreensaver Xscreensaver 4.14_4 4.14_4
Xscreensaver Xscreensaver 4.14_5 4.14_5
Red Hat Enterprise Linux 3 RedHat xscreensaver-1:4.10-20 *

References