CVE

Id
9424  
CVE No.
CVE-2004-0996  
Status
Candidate  
Description
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.  
Phase
Assigned (20041102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63091 9424 CVE-2004-0996 BUGTRAQ:20041117 RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.  View
63092 9424 CVE-2004-0996 URL:http://www.securityfocus.com/archive/1/381443  View
63093 9424 CVE-2004-0996 BUGTRAQ:20041118 Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.  View
63094 9424 CVE-2004-0996 URL:http://www.securityfocus.com/archive/1/381506  View
63095 9424 CVE-2004-0996 BUGTRAQ:20041118 Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.  View
63096 9424 CVE-2004-0996 URL:http://www.securityfocus.com/archive/1/381611  View
63097 9424 CVE-2004-0996 BUGTRAQ:20041124 STG Security Advisory: [SSA-20041122-09] cscope insecure temp file creation vulnerability  View
63098 9424 CVE-2004-0996 URL:http://marc.info/?l=bugtraq&m=110133485519690&w=2  View
63099 9424 CVE-2004-0996 CONFIRM:http://docs.info.apple.com/article.html?artnum=306172  View
63100 9424 CVE-2004-0996 APPLE:APPLE-SA-2007-07-31  View
63101 9424 CVE-2004-0996 URL:http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html  View
63102 9424 CVE-2004-0996 DEBIAN:DSA-610  View
63103 9424 CVE-2004-0996 URL:http://www.debian.org/security/2004/dsa-610  View
63104 9424 CVE-2004-0996 GENTOO:GLSA-200412-11  View
63105 9424 CVE-2004-0996 URL:http://www.gentoo.org/security/en/glsa/glsa-200412-11.xml  View
63106 9424 CVE-2004-0996 BID:11697  View
63107 9424 CVE-2004-0996 URL:http://www.securityfocus.com/bid/11697  View
63108 9424 CVE-2004-0996 BID:25159  View
63109 9424 CVE-2004-0996 URL:http://www.securityfocus.com/bid/25159  View
63110 9424 CVE-2004-0996 VUPEN:ADV-2007-2732  View
63111 9424 CVE-2004-0996 URL:http://www.vupen.com/english/advisories/2007/2732  View
63112 9424 CVE-2004-0996 SECUNIA:26235  View
63113 9424 CVE-2004-0996 URL:http://secunia.com/advisories/26235  View
63114 9424 CVE-2004-0996 XF:cscope-tmp-race-condition(18125)  View

Related JVN