Published: 10/01/2005 Updated: 11/07/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 220

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cscope cscope 15.3
cscope cscope 15.4
cscope cscope 15.5
cscope cscope 13.0
cscope cscope 15.1
debian debian linux 3.0
sco unixware 7.1.1
sco unixware 7.1.3
gentoo linux
sco unixware 7.1.4

A vulnerability has been discovered in cscope, a program to interactively examine C source code, which may allow local users to overwrite files via a symlink attack For the stable distribution (woody) this problem has been fixed in version 153-1woody2 For the unstable distribution (sid) this problem has been fixed in version 155-1 We recommend ...

source: wwwsecurityfocuscom/bid/11697/info Cscope creates temporary files in an insecure way A design error causes the application to fail to verify the presence of a file before writing to it During execution, the utility reportedly creates temporary files in the system's temporary directory, '/tmp', with predictable names This all ...

source: wwwsecurityfocuscom/bid/11697/info Cscope creates temporary files in an insecure way A design error causes the application to fail to verify the presence of a file before writing to it During execution, the utility reportedly creates temporary files in the system's temporary directory, '/tmp', with predictable names This allo ...

NVD-CWE-Other http://www.securityfocus.com/bid/11697 http://www.debian.org/security/2004/dsa-610 http://www.securityfocus.com/archive/1/381443 http://www.securityfocus.com/archive/1/381506 http://www.securityfocus.com/archive/1/381611 http://www.gentoo.org/security/en/glsa/glsa-200412-11.xml http://docs.info.apple.com/article.html?artnum=306172 http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html http://www.securityfocus.com/bid/25159 http://secunia.com/advisories/26235 http://www.vupen.com/english/advisories/2007/2732 http://marc.info/?l=bugtraq&m=110133485519690&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/18125 https://nvd.nist.gov https://www.debian.org/security/./dsa-610 https://www.exploit-db.com/exploits/24750/

CVE-2004-0996

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect