2.1

CVE-2004-0996

Exploit
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cscope ≫ Cscope Version13.0
Cscope ≫ Cscope Version15.1
Cscope ≫ Cscope Version15.3
Cscope ≫ Cscope Version15.4
Cscope ≫ Cscope Version15.5
Debian ≫ Debian Linux Version3.0
Debian ≫ Debian Linux Version3.0 Editionalpha
Debian ≫ Debian Linux Version3.0 Editionarm
Debian ≫ Debian Linux Version3.0 Editionhppa
Debian ≫ Debian Linux Version3.0 Editionia-32
Debian ≫ Debian Linux Version3.0 Editionia-64
Debian ≫ Debian Linux Version3.0 Editionm68k
Debian ≫ Debian Linux Version3.0 Editionmips
Debian ≫ Debian Linux Version3.0 Editionmipsel
Debian ≫ Debian Linux Version3.0 Editionppc
Debian ≫ Debian Linux Version3.0 Editions-390
Debian ≫ Debian Linux Version3.0 Editionsparc
Sco ≫ Unixware Version7.1.1
Sco ≫ Unixware Version7.1.3
Sco ≫ Unixware Version7.1.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.15% 0.626
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://docs.info.apple.com/article.html?artnum=306172
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
http://secunia.com/advisories/26235
http://www.securityfocus.com/bid/25159
http://www.vupen.com/english/advisories/2007/2732
http://marc.info/?l=bugtraq&m=110133485519690&w=2
http://www.debian.org/security/2004/dsa-610
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200412-11.xml
http://www.securityfocus.com/archive/1/381443
http://www.securityfocus.com/archive/1/381506
http://www.securityfocus.com/archive/1/381611
http://www.securityfocus.com/bid/11697
Patch
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/18125