4.6
CVSSv2

CVE-2003-0537

Published: 18/08/2003 Updated: 05/09/2008
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The liece Emacs IRC client 2.0+0.20030527 and previous versions creates temporary files insecurely, which could allow local users to overwrite arbitrary files as other users.

Vulnerable Product Search on Vulmon Subscribe to Product

daiki ueno liece emacs irc client

Vendor Advisories

liece, an IRC client for Emacs, does not take appropriate security precautions when creating temporary files This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running Emacs and liece, potentially with contents supplied by the attacker For the stable distribution (woody) this problem has been fixe ...