4.6

CVE-2003-0539

skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ddskk ≫ Ddskk Version 11.6_.rel.0
Redhat ≫ Daredevil Skk Version 11.3.2 Edition noarch
Redhat ≫ Daredevil Skk Version 11.3.5 Edition noarch
Redhat ≫ Daredevil Skk Version 11.6.0-6 Edition noarch
Redhat ≫ Daredevil Skk Version 11.6.0-8 Edition noarch
Redhat ≫ Daredevil Skk Version 11.6.0-10 Edition noarch
Redhat ≫ Ddskk-xemacs Version 11.6.0-6 Edition noarch
Redhat ≫ Ddskk-xemacs Version 11.6.0-8 Edition noarch
Redhat ≫ Ddskk-xemacs Version 11.6.0-10 Edition noarch
Skk ≫ Skk Version 10.62a
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.274
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.debian.org/security/2003/dsa-343
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2003-242.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A28