NVD

Id
74364  
Name
CVE-2003-1294  
Description
Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2003-12-31  
Modified Date
2011-03-07  
Seq
2003-1294  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
382094 74364 CVE-2003-1294 20060602-01-U  View
382095 74364 CVE-2003-1294 http://jwz.livejournal.com/310943.html  View
382096 74364 CVE-2003-1294 oval:org.mitre.oval:def:10848  View
382097 74364 CVE-2003-1294 http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm  View
382098 74364 CVE-2003-1294 http://www.novell.com/linux/download/updates/90_i386.html  View
382099 74364 CVE-2003-1294 RHSA-2006:0498  View
382100 74364 CVE-2003-1294 9125  View
382101 74364 CVE-2003-1294 ADV-2006-1948  View
382102 74364 CVE-2003-1294 https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=124968  View
382103 74364 CVE-2003-1294 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182286  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63623 JVNDB-2003-000349 XScreenSaver における複数のシンボリックリンク攻撃を受ける脆弱性 XScreenSaver には、セキュリティ上不適切な方法で一時ファイルを作成するため、以下の複数の箇所においてシンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2003-1294 8117 CVE-2003-1294 74364 2.1 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000349.html 2003-11-18 2014-11-07 View